October 2026 Security Updates Security Update secure@microsoft.com The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc. 2026-Oct 2026-Oct Final 1.0 2914 2026-11-05T01:04:44 October 2026 Security Updates 2026-10-13T07:00:00 2026-11-05T01:04:44 <h2 id="this-release-consists-of-the-following-1474-microsoft-cves">This release consists of the following 1474 Microsoft CVEs:</h2> <table> <thead> <tr> <th>Product Family</th> <th style="text-align: right;">Vulnerabilities Addressed</th> <th style="text-align: right;">Distinct Updates</th> <th>Update Type</th> </tr> </thead> <tbody> <tr> <td>Windows</td> <td style="text-align: right;">1,105</td> <td style="text-align: right;">39</td> <td>Cumulative</td> </tr> <tr> <td>Office</td> <td style="text-align: right;">164</td> <td style="text-align: right;">11</td> <td>Cumulative</td> </tr> <tr> <td>SharePoint Server</td> <td style="text-align: right;">37</td> <td style="text-align: right;">1</td> <td>Cumulative</td> </tr> <tr> <td>SQL Server</td> <td style="text-align: right;">22</td> <td style="text-align: right;">8</td> <td>Cumulative</td> </tr> <tr> <td>Exchange Server</td> <td style="text-align: right;">7</td> <td style="text-align: right;">8</td> <td>Cumulative</td> </tr> <tr> <td>Developer Tools (Dev Div)</td> <td style="text-align: right;">65</td> <td style="text-align: right;">103</td> <td>Mixed</td> </tr> <tr> <td>Azure</td> <td style="text-align: right;">15</td> <td style="text-align: right;">20</td> <td>Individual</td> </tr> <tr> <td>Defender</td> <td style="text-align: right;">4</td> <td style="text-align: right;">3</td> <td>Automatic</td> </tr> <tr> <td>Edge</td> <td style="text-align: right;">0</td> <td style="text-align: right;">1</td> <td>Automatic</td> </tr> <tr> <td>Other</td> <td style="text-align: right;">35</td> <td style="text-align: right;">33</td> <td>Individual</td> </tr> </tbody> </table> <h3 id="notable-cves">Notable CVEs</h3> <table> <thead> <tr> <th>CVE ID</th> <th>Title</th> <th>Notable Item</th> </tr> </thead> <tbody> <tr> <td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96951">CVE-2026-96951</a></td> <td>Windows Shell Security Feature Bypass Vulnerability</td> <td>Exploitation Detected</td> </tr> <tr> <td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108398">CVE-2026-108398</a></td> <td>.NET Framework Security Feature Bypass Vulnerability</td> <td>Publicly disclosed</td> </tr> <tr> <td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497">CVE-2026-111497</a></td> <td>Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder</td> <td>Publicly disclosed</td> </tr> </tbody> </table> <h2 id="we-are-republishing-753-non-microsoft-cve-chrome-cves-not-listed">We are republishing 753 non-Microsoft CVE (Chrome CVEs not listed):</h2> <table> <thead> <tr> <th>CNA</th> <th>CVE ID</th> <th>Title</th> </tr> </thead> <tbody> <tr> <td>Cisco Talos</td> <td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21413">CVE-2026-21413</a></td> <td>Raw Image Extension Remote Code Execution Vulnerability</td> </tr> <tr> <td>Google</td> <td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-111497">CVE-2026-111497</a></td> <td>Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder</td> </tr> <tr> <td>GitHub_M</td> <td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-92707">CVE-2026-92707</a></td> <td>MessagePack-CSharp Denial of Service Vulnerability</td> </tr> </tbody> </table> <h2 id="security-update-guide-blog-posts">Security Update Guide Blog Posts</h2> <table> <thead> <tr> <th>Date</th> <th>Blog Post</th> </tr> </thead> <tbody> <tr> <td>October 13, 2026</td> <td><a href="https://www.microsoft.com/en-us/msrc/blog/2026/10/using-risk-cohorts-to-prioritize-security-updates">Using risk cohorts to prioritize security updates</a></td> </tr> <tr> <td>October 31, 2025</td> <td><a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience">You asked, we delivered: Introducing new features for an improved security experience</a></td> </tr> <tr> <td>October 28, 2025</td> <td><a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td> </tr> <tr> <td>October 22, 2025</td> <td><a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td> </tr> <tr> <td>November 12, 2024</td> <td><a href="https://aka.ms/MSRC-CSAF-Blog">Toward greater transparency: Publishing machine-readable CSAF files</a></td> </tr> <tr> <td>June 27, 2024</td> <td><a href="https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/">Toward greater transparency: Unveiling Cloud Service CVEs</a></td> </tr> <tr> <td>April 9, 2024</td> <td><a href="https://aka.ms/MSRC-CWE-Blog">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td> </tr> </tbody> </table> <h2 id="relevant-resources">Relevant Resources</h2> <ul> <li>The new Hotpatching feature is now generally available. Please see <a href="https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li> <li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href="https://www.catalog.update.microsoft.com/Home.aspx">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href="https://docs.microsoft.com/en-us/lifecycle/faq/windows">Windows Lifecycle Facts Sheet</a>.</li> <li>Microsoft is improving Windows Release Notes. For more information, please see <a href="https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399">What's next for Windows release notes</a>.</li> <li>A list of the latest servicing stack updates for each operating system can be found in <a href="https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li> <li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li> <li>Customers running Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See <a href="https://support.microsoft.com/en-us/topic/procedure-to-continue-receiving-security-updates-after-extended-support-ends-on-january-14-2020-48c59204-fe67-3f42-84fc-c3c3145ff28e">4522133</a> for more information.</li> </ul> <h2 id="known-issues">Known Issues</h2> <p>You can see these in more detail from the Deployments tab by selecting <strong>Known Issues</strong> column in the <strong>Edit Columns</strong> panel.</p> <p>For more information about Windows Known Issues, please see <a href="https://docs.microsoft.com/en-us/windows/release-information/windows-message-center">Windows message center</a> (links to currently-supported versions of Windows are in the left pane).</p> <table> <thead> <tr> <th>KB Article</th> <th>Applies To</th> </tr> </thead> <tbody> <tr> <td><a href="https://support.microsoft.com/help/5126646">5126646</a></td> <td>Windows Server 2025</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5126651">5126651</a></td> <td>Windows 10, version 1809, Windows Server 2019</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5126655">5126655</a></td> <td>Windows Server 2022</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5126657">5126657</a></td> <td>Windows 10 versions 21H2 and 22H2</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5126868">5126868</a></td> <td>Windows 10 version 1607, Windows Server 2016</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5126934">5126934</a></td> <td>SQL Server 2022 CU27 (Windows and Linux)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5126967">5126967</a></td> <td>SQL Server 2025 CU9 (Windows and Linux)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5127646">5127646</a></td> <td>Windows 11 version 26H1</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5127648">5127648</a></td> <td>Windows 11 version 26H2, Windows 11 version 25H2, Windows 11 version 24H2</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5128492">5128492</a></td> <td>SQL Server 2025 GDR (Windows and Linux)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5128493">5128493</a></td> <td>SQL Server 2022 GDR (Windows and Linux)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5128494">5128494</a></td> <td>SQL Server 2019 CU32 (Windows and Linux)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5128495">5128495</a></td> <td>SQL Server 2019 GDR (Windows and Linux)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5128496">5128496</a></td> <td>SQL Server 2017 CU31 (Windows and Linux)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5128497">5128497</a></td> <td>SQL Server 2017 GDR (Windows and Linux)</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5129955">5129955</a></td> <td>Exchange Server SE</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5129956">5129956</a></td> <td>Exchange Server 2019 CU15</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5129957">5129957</a></td> <td>Exchange Server 2019 CU14</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5129958">5129958</a></td> <td>Exchange Server 2016 CU23</td> </tr> </tbody> </table> The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Office LTSC 2024 for 64-bit editions Microsoft Office LTSC 2024 for 32-bit editions Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC for Mac 2024 Microsoft Office 365 for Mac Microsoft SharePoint Server Subscription Edition Office Online Server Microsoft Office for Android Azure DevOps CLI Extension azure-keyvault-keys azure-keyvault-certificates azure-keyvault-secrets azure-keyvault-administration Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 azure-keyvault-securitydomain azure_security_keyvault_keys (Rust) azure_security_keyvault_certificates (Rust) azure_security_keyvault_secrets (Rust) Skype for Business Server Subscription Edition CU1 Skype for Business Server 2015 CU13 Skype for Business Server 2019 CU8 Outlook.com Microsoft Visual Studio 2026 version 18.10 Microsoft Visual Studio 2022 version 17.14 Azure Pipelines Visual Studio Code Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 version 1809 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 1809 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 21H2 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 22H2 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 Microsoft .NET Framework 4.8 on Windows 10 version 1607 Microsoft .NET Framework 4.8 on Windows Server 2012 Microsoft .NET Framework 4.8 on Windows Server 2012 R2 Microsoft .NET Framework 4.8 on Windows Server 2016 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 24H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 25H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 23H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H2 Sysinternals Suite .NET 11.0 runtime installed on Windows .NET 11.0 runtime installed on Linux .NET 11.0 runtime installed on Mac OS .NET 10.0 runtime installed on Windows .NET 10.0 runtime installed on Linux .NET 10.0 runtime installed on Mac OS .NET 8.0 runtime installed on Linux .NET 8.0 runtime installed on Windows .NET 8.0 runtime installed on Mac OS .NET 9.0 runtime installed on Linux .NET 9.0 runtime installed on Mac OS .NET 9.0 runtime installed on Windows Microsoft .NET Framework 3.5 on Windows 11 version 26H1 Microsoft .NET Framework 3.5 on Windows Server 2012 Microsoft .NET Framework 3.5 on Windows Server 2012 R2 ASP.NET Core 10.0 ASP.NET Core 8.0 ASP.NET Core 9.0 ASP.NET Core 11.0 .NET 8.0 installed on Windows .NET 8.0 installed on Linux .NET 8.0 installed on Mac OS .NET 9.0 installed on Windows .NET 9.0 installed on Linux .NET 9.0 installed on Mac OS .NET 10.0 installed on Windows .NET 10.0 installed on Linux .NET 10.0 installed on Mac OS .NET 11.0 installed on Windows .NET 11.0 installed on Linux .NET 11.0 installed on Mac OS Microsoft Visual Studio 2019 version 16.11 Microsoft Visual Studio 2026 version 18.11 Microsoft Visual Studio 2026 version 18.12 PowerShell 7.4 PowerShell 7.6 PowerShell 7.5 Windows Sysinternals Process Monitor ASP.NET Core runtime and targeting-pack Linux tarballs (Microsoft-published) .NET source-build Linux tarballs (all archive types) Microsoft Visual Studio 2017 version 15.9 Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Windows 10 Version 1607 for x64-based Systems Windows Server 2022 Windows 10 Version 1607 for 32-bit Systems Windows Server 2016 (Server Core installation) Windows Server 2025 (Server Core installation) Windows Server 2025 Windows Server 2022 (Server Core installation) Windows Server 2016 Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 24H2 for x64-based Systems Windows 11 Version 25H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Windows 11 Version 26H2 for ARM64-based Systems Windows 11 Version 26H2 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems Windows 11 version 26H1 for x64-based Systems Windows Security App HEVC Video Extensions from Device Manufacturer on Windows 11 Version 26H1 for ARM64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 11 version 26H1 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows Server 2025 HEVC Video Extensions from Device Manufacturer on Windows 11 Version 23H2 for ARM64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 11 Version 24H2 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 11 Version 24H2 for ARM64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 11 Version 23H2 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 11 Version 25H2 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 11 Version 25H2 for ARM64-based Systems HEVC Video Extensions from Device Manufacturer on Windows Server 2025 (Server Core installation) HEVC Video Extensions from Device Manufacturer on Windows 10 Version 22H2 for 32-bit Systems HEVC Video Extensions from Device Manufacturer on Windows 10 Version 22H2 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 10 Version 21H2 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 10 Version 22H2 for ARM64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 10 Version 21H2 for ARM64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 10 Version 21H2 for 32-bit Systems HEVC Video Extensions from Device Manufacturer on Windows Server 2022 (Server Core installation) HEVC Video Extensions from Device Manufacturer on Windows Server 2022 HEVC Video Extensions from Device Manufacturer on Windows Server 2019 (Server Core installation) HEVC Video Extensions from Device Manufacturer on Windows Server 2019 HEVC Video Extensions from Device Manufacturer on Windows 10 Version 1809 for x64-based Systems HEVC Video Extensions for Licensed Applications HEVC Video Extensions from Device Manufacturer on Windows 10 Version 1809 for 32-bit Systems HEVC Video Extensions Microsoft Configuration Manager 2509 Microsoft Configuration Manager 2603 Raw Image Extension on Windows 10 Version 1607 for x64-based Systems Raw Image Extension on Windows 10 Version 1607 for 32-bit Systems Raw Image Extension on Windows 10 for x64-based Systems Raw Image Extension on Windows 10 for 32-bit Systems Raw Image Extension on Windows 10 Version 21H2 for x64-based Systems Raw Image Extension on Windows 10 Version 21H2 for ARM64-based Systems Raw Image Extension on Windows 10 Version 21H2 for 32-bit Systems Raw Image Extension on Windows 11 version 21H2 for ARM64-based Systems Raw Image Extension on Windows 11 version 21H2 for x64-based Systems Raw Image Extension on Windows 10 Version 20H2 for ARM64-based Systems Raw Image Extension on Windows 10 Version 20H2 for 32-bit Systems Raw Image Extension on Windows 10 Version 21H1 for 32-bit Systems Raw Image Extension on Windows 10 Version 21H1 for ARM64-based Systems Raw Image Extension on Windows 10 Version 21H1 for x64-based Systems Raw Image Extension on Windows 10 Version 1909 for ARM64-based Systems Raw Image Extension on Windows 10 Version 1909 for x64-based Systems Raw Image Extension on Windows 10 Version 1909 for 32-bit Systems Raw Image Extension on Windows 10 Version 1809 for HoloLens Raw Image Extension on Windows 10 Version 1809 for ARM64-based Systems Raw Image Extension on Windows 10 Version 1809 for x64-based Systems Raw Image Extension on Windows 10 Version 1809 for 32-bit Systems Raw Image Extension on Windows 11 version 26H2 Raw Image Extension on Windows 11 Version 26H2 for ARM64-based Systems Raw Image Extension on Windows 11 Version 26H2 for x64-based Systems MPEG-2 Video Extension Windows 10 Version 22H2 for 32-bit Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Microsoft Exchange Server 2019 Cumulative Update 14 Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 15 Microsoft Dynamics NAV 2018 on Windows Server 2012 Microsoft Dynamics NAV 2017 on Windows Server 2012 Microsoft Dataverse Azure AI Foundry Microsoft Entra application proxy Azure Kubernetes Configuration Service VM Inspector for Azure Virtual Machines Azure HDInsight Azure CLI Arc Enabled Servers - Azure Connected Machine Agent Azure CycleCloud 8.9.1 Azure SRE Agent Azure App Service for Linux Azure API Center Azure Event Grid System Microsoft Partner Center Microsoft Exchange Online Microsoft Exchange Server Subscription Edition RTM Microsoft SQL Server 2017 for x64-based Systems (CU31) Microsoft SQL Server 2017 for x64-based Systems (GDR) Microsoft SQL Server 2019 for x64-based Systems (GDR) Microsoft SQL Server 2022 for x64-based Systems (CU27) Microsoft SQL Server 2025 for x64-based Systems (GDR) Microsoft SQL Server 2025 for x64-based Systems (CU9) Microsoft SQL Server 2019 for x64-based Systems (CU32) Microsoft SQL Server 2022 for x64-based Systems (GDR) Microsoft Defender for Endpoint for Windows Microsoft Configuration Manager 2503 Windows Defender System.Formats.Cbor on .NET 10.0 runtime installed on Windows System.Formats.Cbor on .NET 10.0 runtime installed on Linux System.Formats.Cbor on .NET 10.0 runtime installed on Mac OS System.Formats.Cbor on .NET 8.0 runtime installed on Windows System.Formats.Cbor on .NET 8.0 runtime installed on Linux System.Formats.Cbor on .NET 8.0 runtime installed on Mac OS System.Formats.Cbor on .NET 9.0 runtime installed on Windows System.Formats.Cbor on .NET 9.0 runtime installed on Linux System.Formats.Cbor on .NET 9.0 runtime installed on Mac OS Microsoft.Native.Quic.MsQuic.Schannel on .NET 10.0 runtime installed on Windows Microsoft.Native.Quic.MsQuic.Schannel on .NET 11.0 runtime installed on Windows Microsoft.Native.Quic.MsQuic.Schannel on .NET 8.0 runtime installed on Windows Microsoft.Native.Quic.MsQuic.Schannel on .NET 9.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Common on .NET 10.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Common on .NET 10.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Common on .NET 10.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Core on .NET 10.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Core on .NET 10.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Core on .NET 10.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Common on .NET 11.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Common on .NET 11.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Common on .NET 11.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Core on .NET 11.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Core on .NET 11.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Core on .NET 11.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Common on .NET 8.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Common on .NET 8.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Common on .NET 8.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Core on .NET 8.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Core on .NET 8.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Core on .NET 8.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Common on .NET 9.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Common on .NET 9.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Common on .NET 9.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Core on .NET 9.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Core on .NET 9.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Core on .NET 9.0 runtime installed on Mac OS Microsoft.AspNetCore.Authentication.Negotiate on .NET 10.0 runtime installed on Windows Microsoft.AspNetCore.Authentication.Negotiate on .NET 10.0 runtime installed on Linux Microsoft.AspNetCore.Authentication.Negotiate on .NET 10.0 runtime installed on Mac OS Microsoft.AspNetCore.Authentication.Negotiate on .NET 8.0 runtime installed on Windows Microsoft.AspNetCore.Authentication.Negotiate on .NET 8.0 runtime installed on Linux Microsoft.AspNetCore.Authentication.Negotiate on .NET 8.0 runtime installed on Mac OS Microsoft.AspNetCore.Authentication.Negotiate on .NET 9.0 runtime installed on Windows Microsoft.AspNetCore.Authentication.Negotiate on .NET 9.0 runtime installed on Linux Microsoft.AspNetCore.Authentication.Negotiate on .NET 9.0 runtime installed on Mac OS System.Security.Cryptography.Xml on .NET 8.0 runtime installed on Windows System.Security.Cryptography.Xml on .NET 8.0 runtime installed on Linux System.Security.Cryptography.Xml on .NET 8.0 runtime installed on Mac OS Linux 3P (Third Party) Distros Windows Subsystem for Linux (WSL2) System.Security.Cryptography.Pkcs on .NET 10.0 runtime installed on Windows System.Security.Cryptography.Pkcs on .NET 10.0 runtime installed on Linux System.Security.Cryptography.Pkcs on .NET 10.0 runtime installed on Mac OS System.Security.Cryptography.Pkcs on .NET 11.0 runtime installed on Windows System.Security.Cryptography.Pkcs on .NET 11.0 runtime installed on Linux System.Security.Cryptography.Pkcs on .NET 11.0 runtime installed on Mac OS System.Security.Cryptography.Pkcs on .NET 8.0 runtime installed on Windows System.Security.Cryptography.Pkcs on .NET 8.0 runtime installed on Linux System.Security.Cryptography.Pkcs on .NET 8.0 runtime installed on Mac OS System.Security.Cryptography.Pkcs on .NET 9.0 runtime installed on Windows System.Security.Cryptography.Pkcs on .NET 9.0 runtime installed on Linux System.Security.Cryptography.Pkcs on .NET 9.0 runtime installed on Mac OS Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 10.0 runtime installed on Windows Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 10.0 runtime installed on Linux Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 10.0 runtime installed on Mac OS Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 11.0 runtime installed on Windows Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 11.0 runtime installed on Linux Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 11.0 runtime installed on Mac OS Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 8.0 runtime installed on Windows Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 8.0 runtime installed on Linux Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 8.0 runtime installed on Mac OS Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 9.0 runtime installed on Windows Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 9.0 runtime installed on Linux Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 9.0 runtime installed on Mac OS azure-storage-blob-batch System.Security.Cryptography.Xml on .NET 10.0 runtime installed on Windows System.Security.Cryptography.Xml on .NET 10.0 runtime installed on Linux System.Security.Cryptography.Xml on .NET 10.0 runtime installed on Mac OS System.Security.Cryptography.Xml on .NET 11.0 runtime installed on Windows System.Security.Cryptography.Xml on .NET 11.0 runtime installed on Linux System.Security.Cryptography.Xml on .NET 11.0 runtime installed on Mac OS System.Security.Cryptography.Xml on .NET 9.0 runtime installed on Windows System.Security.Cryptography.Xml on .NET 9.0 runtime installed on Linux System.Security.Cryptography.Xml on .NET 9.0 runtime installed on Mac OS Microsoft.AspNetCore.Components.WebAssembly.Server Microsoft.AspNetCore.Components.WebAssembly.DevServer Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 10.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 10.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 10.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 11.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 11.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 11.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 8.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 8.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 8.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 9.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 9.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 9.0 runtime installed on Mac OS Microsoft Identity Client for NodeJS Microsoft Identity Client for NodeJS on Windows 10 Version 22H2 for x64-based Systems microsoft-identity-web v4 microsoft-identity-web v3 on v3 Microsoft PowerToys Microsoft Paint Microsoft Power Apps for Android Microsoft Bookings MessagePack 2.5.303 MessagePack 3.1.9 azl3 brotli 1.1.0-2 on Azure Linux 3.0 azl3 qemu 10.1.0-2 on Azure Linux 3.0 azl3 nodejs 24.21.0-1 on Azure Linux 3.0 azl3 qemu 10.1.0-1 on Azure Linux 3.0 azl3 openssh 9.8p1-10 on Azure Linux 3.0 azl3 expat 2.8.3-2 on Azure Linux 3.0 azl3 kernel 6.6.157.1-1 on Azure Linux 3.0 azl3 moby-engine 25.0.3-20 on Azure Linux 3.0 azl3 httpd 2.4.68-1 on Azure Linux 3.0 azl3 ntfs-3g 2022.10.3-5 on Azure Linux 3.0 azl3 application-gateway-kubernetes-ingress 1.7.7-6 on Azure Linux 3.0 azl3 azcopy 10.25.1-9 on Azure Linux 3.0 azl3 azurelinux-image-tools 1.6.0-3 on Azure Linux 3.0 azl3 cert-manager 1.12.15-14 on Azure Linux 3.0 azl3 cf-cli 8.7.11-9 on Azure Linux 3.0 azl3 cloud-provider-kubevirt 0.5.1-9 on Azure Linux 3.0 azl3 containerd2 2.3.4-1 on Azure Linux 3.0 azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0 azl3 coredns 1.11.4-21 on Azure Linux 3.0 azl3 cri-tools 1.32.0-8 on Azure Linux 3.0 azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0 azl3 docker-compose 2.27.0-14 on Azure Linux 3.0 azl3 etcd 3.5.33-1 on Azure Linux 3.0 azl3 flannel 0.24.2-32 on Azure Linux 3.0 azl3 gh 2.101.0-1 on Azure Linux 3.0 azl3 git-lfs 3.6.1-6 on Azure Linux 3.0 azl3 ignition-flatcar 2.22.0-6 on Azure Linux 3.0 azl3 jx 3.10.182-5 on Azure Linux 3.0 azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0 azl3 keda 2.14.1-19 on Azure Linux 3.0 azl3 kube-vip-cloud-provider 0.0.10-10 on Azure Linux 3.0 azl3 kubernetes 1.30.10-30 on Azure Linux 3.0 azl3 kubevirt 1.8.4-2 on Azure Linux 3.0 azl3 kured 1.15.0-6 on Azure Linux 3.0 azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0 azl3 multus 4.0.2-11 on Azure Linux 3.0 azl3 opa 0.63.0-5 on Azure Linux 3.0 azl3 packer 1.9.5-21 on Azure Linux 3.0 azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0 azl3 prometheus-node-exporter 1.7.0-5 on Azure Linux 3.0 azl3 prometheus-process-exporter 0.8.2-5 on Azure Linux 3.0 azl3 skopeo 1.14.4-13 on Azure Linux 3.0 azl3 sriov-network-device-plugin 3.7.0-8 on Azure Linux 3.0 azl3 telegraf 1.31.0-33 on Azure Linux 3.0 azl3 vitess 19.0.4-14 on Azure Linux 3.0 azl3 golang 1.26.7-1 on Azure Linux 3.0 azl3 golang 1.27.1-1 on Azure Linux 3.0 azl3 influxdb 2.7.5-21 on Azure Linux 3.0 azl4 gcc 15.3.1-1.azl4 on Azure Linux 4.0 azl3 docker-cli 25.0.7-5 on Azure Linux 3.0 azl3 runc 1.4.3-1 on Azure Linux 3.0 azl3 cyrus-sasl 2.1.28-8 on Azure Linux 3.0 azl3 cyrus-sasl-bootstrap 2.1.28-8 on Azure Linux 3.0 azl3 freetype 2.13.2-2 on Azure Linux 3.0 azl3 gnutls 3.8.13-1 on Azure Linux 3.0 azl3 libsndfile 1.2.2-5 on Azure Linux 3.0 azl3 rust 1.75.0-31 on Azure Linux 3.0 azl3 rust 1.96.1-2 on Azure Linux 3.0 azl3 pgbouncer 1.25.2-1 on Azure Linux 3.0 azl3 erlang 26.2.5.21-6 on Azure Linux 3.0 azl3 thrift 0.24.0-1 on Azure Linux 3.0 azl3 opensc 0.27.1-2 on Azure Linux 3.0 azl3 aspell 0.60.8.1-1 on Azure Linux 3.0 azl3 gnupg2 2.4.9-3 on Azure Linux 3.0 azl3 hdf5 1.14.6-4 on Azure Linux 3.0 azl3 python-twisted 22.10.0-6 on Azure Linux 3.0 azl3 cups 2.4.19-1 on Azure Linux 3.0 azl3 guava 33.0.0-1 on Azure Linux 3.0 azl3 javapackages-bootstrap 1.14.0-4 on Azure Linux 3.0 azl3 libnfs 5.0.2-2 on Azure Linux 3.0 azl3 busybox 1.36.1-27 on Azure Linux 3.0 azl3 libreswan 4.15-3 on Azure Linux 3.0 azl3 python-oauthlib 3.2.2-3 on Azure Linux 3.0 azl3 libical 3.0.10-1 on Azure Linux 3.0 azl3 libsmi 0.4.8-29 on Azure Linux 3.0 azl3 ceph 18.2.2-13 on Azure Linux 3.0 azl3 clamav 1.5.4-2 on Azure Linux 3.0 azl3 libmspack 0.11alpha-1 on Azure Linux 3.0 azl3 objectweb-asm 9.6-1 on Azure Linux 3.0 azl3 libconfini 1.16.4-1 on Azure Linux 3.0 azl3 nginx 1.30.4-1 on Azure Linux 3.0 azl3 rabbitmq-server 3.13.7-9 on Azure Linux 3.0 azl3 squid 6.13-5 on Azure Linux 3.0 azl3 util-linux 2.40.2-6 on Azure Linux 3.0 azl3 cifs-utils 7.7-1 on Azure Linux 3.0 azl3 nfs-utils 2.6.4-4 on Azure Linux 3.0 azl3 unbound 1.26.1-1 on Azure Linux 3.0 azl3 curl 8.11.1-11 on Azure Linux 3.0 azl3 python3 3.12.14-2 on Azure Linux 3.0 azl3 libarchive 3.7.7-7 on Azure Linux 3.0 azl3 haproxy 2.9.11-8 on Azure Linux 3.0 azl4 ruby 3.4.10-36.azl4 on Azure Linux 4.0 azl3 ruby 3.3.5-10 on Azure Linux 3.0 azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 azl3 openvmm 0.1.0-1 on Azure Linux 3.0 azl3 libslirp 4.9.3-1 on Azure Linux 3.0 azl3 python-msgpack 1.0.5-3 on Azure Linux 3.0 azl3 rapidjson 1.1.0-8 on Azure Linux 3.0 azl3 rust 1.98.1-1 on Azure Linux 3.0 azl3 krb5 1.21.3-5 on Azure Linux 3.0 azl3 emacs 29.4-6 on Azure Linux 3.0 azl3 mstflint 4.28.0-1 on Azure Linux 3.0 azl3 libXi 1.8.1-1 on Azure Linux 3.0 azl3 libXtst 1.2.4-1 on Azure Linux 3.0 azl3 wayland 1.22.0-1 on Azure Linux 3.0 azl3 iscsi-initiator-utils 2.1.12-1 on Azure Linux 3.0 azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0 azl3 qtbase 6.6.3-6 on Azure Linux 3.0 azl3 python-py 1.11.0-1 on Azure Linux 3.0 azl3 rsyslog 8.2308.0-7 on Azure Linux 3.0 azl3 bind 9.20.26-1 on Azure Linux 3.0 azl3 python-virtualenv 20.36.1-6 on Azure Linux 3.0 azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0 azl3 cmake 3.30.3-15 on Azure Linux 3.0 azl3 xorg-x11-server-Xwayland 24.1.13-1 on Azure Linux 3.0 azl3 debootstrap 1.0.128+nmu2-1 on Azure Linux 3.0 azl3 python-pyasn1 0.4.8-3 on Azure Linux 3.0 azl3 sqlite 3.44.0-4 on Azure Linux 3.0 azl3 vsftpd 3.0.5-1 on Azure Linux 3.0 azl3 dcos-cli 1.2.0-22 on Azure Linux 3.0 azl3 edk2 20240524git3e722403cd16-20 on Azure Linux 3.0 azl3 tensorflow 2.16.1-11 on Azure Linux 3.0 azl3 kubernetes 1.30.10-31 on Azure Linux 3.0 azl3 moby-engine 25.0.18-1 on Azure Linux 3.0 azl3 kata-containers 4.1.0.kata1-2 on Azure Linux 3.0 azl3 kata-containers-cc 3.15.0.aks0-23 on Azure Linux 3.0 azl3 kubernetes 1.30.10-32 on Azure Linux 3.0 azl3 moby-containerd-cc 1.7.7-19 on Azure Linux 3.0 azl3 golang 1.26.10-1 on Azure Linux 3.0 azl3 golang 1.27.3-1 on Azure Linux 3.0 azl3 runc 1.4.3-2 on Azure Linux 3.0 azl3 freetype 2.13.2-3 on Azure Linux 3.0 azl3 kernel 6.6.159.1-1 on Azure Linux 3.0 azl3 libsndfile 1.2.2-7 on Azure Linux 3.0 azl3 opensc 0.27.1-3 on Azure Linux 3.0 azl3 aspell 0.60.8.1-2 on Azure Linux 3.0 azl3 hdf5 1.14.6-6 on Azure Linux 3.0 azl3 python-twisted 22.10.0-7 on Azure Linux 3.0 azl3 cups 2.4.19-2 on Azure Linux 3.0 azl3 guava 33.0.0-2 on Azure Linux 3.0 azl3 javapackages-bootstrap 1.14.0-5 on Azure Linux 3.0 azl3 busybox 1.36.1-28 on Azure Linux 3.0 azl3 python-oauthlib 3.2.2-4 on Azure Linux 3.0 azl3 libical 3.0.10-3 on Azure Linux 3.0 azl3 nfs-utils 2.6.4-5 on Azure Linux 3.0 azl3 curl 8.11.1-12 on Azure Linux 3.0 azl3 openvmm 0.4.0-1 on Azure Linux 3.0 azl3 expat 2.9.0-1 on Azure Linux 3.0 azl3 qtbase 6.6.3-7 on Azure Linux 3.0 azl3 bind 9.20.29-1 on Azure Linux 3.0 azl3 python3 3.12.16-1 on Azure Linux 3.0 azl3 azcopy 10.25.1-10 on Azure Linux 3.0 azl3 cert-manager 1.12.15-15 on Azure Linux 3.0 azl3 containerd2 2.3.7-1 on Azure Linux 3.0 azl3 containerized-data-importer 1.62.0-9 on Azure Linux 3.0 azl3 influxdb 2.7.5-22 on Azure Linux 3.0 azl3 packer 1.9.5-23 on Azure Linux 3.0 azl3 skopeo 1.14.4-15 on Azure Linux 3.0 azl3 telegraf 1.31.0-35 on Azure Linux 3.0 azl3 vitess 19.0.4-16 on Azure Linux 3.0 azl3 edk2 20240524git3e722403cd16-21 on Azure Linux 3.0 azl3 rabbitmq-server 3.13.7-10 on Azure Linux 3.0 azl3 krb5 1.21.3-6 on Azure Linux 3.0 azl3 emacs 29.4-7 on Azure Linux 3.0 azl3 mstflint 4.28.0-2 on Azure Linux 3.0 azl3 python-virtualenv 20.36.1-9 on Azure Linux 3.0 azl3 azurelinux-image-tools 1.7.0-2 on Azure Linux 3.0 azl3 coredns 1.11.4-22 on Azure Linux 3.0 azl3 docker-buildx 0.14.0-19 on Azure Linux 3.0 azl3 docker-cli 25.0.7-6 on Azure Linux 3.0 azl3 docker-compose 2.27.0-16 on Azure Linux 3.0 azl3 gh 2.102.0-2 on Azure Linux 3.0 azl3 dnsmasq 2.93-1 on Azure Linux 3.0 azl3 glib-networking 2.78.0-2 on Azure Linux 3.0 azl3 python-markdown 3.8.2-3 on Azure Linux 3.0 azl3 patch 2.7.6-10 on Azure Linux 3.0 azl3 pytorch 2.2.2-17 on Azure Linux 3.0 azl3 afflib 3.7.20-1 on Azure Linux 3.0 azl3 glibc 2.38-21 on Azure Linux 3.0 azl3 elixir 1.16.1-3 on Azure Linux 3.0 azl3 cri-tools 1.32.0-10 on Azure Linux 3.0 azl3 multus 4.0.2-12 on Azure Linux 3.0 azl3 prometheus-adapter 0.12.0-12 on Azure Linux 3.0 azl3 cni-plugins 1.4.0-6 on Azure Linux 3.0 azl3 nvidia-container-toolkit 1.17.8-4 on Azure Linux 3.0 azl3 cf-cli 8.7.11-10 on Azure Linux 3.0 azl3 cloud-provider-kubevirt 0.5.1-10 on Azure Linux 3.0 azl3 kube-vip-cloud-provider 0.0.10-11 on Azure Linux 3.0 azl3 kubevirt 1.8.4-4 on Azure Linux 3.0 azl3 sriov-network-device-plugin 3.7.0-9 on Azure Linux 3.0 azl3 dasel 2.8.1-5 on Azure Linux 3.0 azl3 p7zip 16.02-23 on Azure Linux 3.0 azl3 ansible 2.17.11-1 on Azure Linux 3.0 azl3 dpdk 23.11.3-1 on Azure Linux 3.0 azl3 libdwarf 0.9.2-1 on Azure Linux 3.0 azl3 libcontainers-common 20240213-3 on Azure Linux 3.0 azl3 gcc 13.2.0-7 on Azure Linux 3.0 azl3 libdb 5.3.28-9 on Azure Linux 3.0 azl3 mtools 4.0.43-2 on Azure Linux 3.0 azl4 ruby 3.4.10-36.azl4 on Azure Linux 4.0 Microsoft Exchange Online Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Windows Server 2016 Office Online Server Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 (Server Core installation) Microsoft SharePoint Enterprise Server 2016 Microsoft SQL Server 2017 for x64-based Systems (GDR) Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Microsoft SharePoint Server 2019 Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Dynamics NAV 2017 on Windows Server 2012 Visual Studio Code Microsoft .NET Framework 4.8 on Windows Server 2012 Microsoft .NET Framework 4.8 on Windows Server 2012 R2 Microsoft .NET Framework 4.8 on Windows Server 2016 Microsoft .NET Framework 4.8 on Windows 10 version 1607 Outlook.com Microsoft Edge (Chromium-based) Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 21H2 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 22H2 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 1809 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 version 1809 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607 Microsoft Dynamics NAV 2018 on Windows Server 2012 Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Raw Image Extension on Windows 10 Version 1607 for 32-bit Systems Raw Image Extension on Windows 10 Version 1607 for x64-based Systems Raw Image Extension on Windows 10 Version 1809 for 32-bit Systems Raw Image Extension on Windows 10 Version 1809 for x64-based Systems Raw Image Extension on Windows 10 Version 1809 for ARM64-based Systems Raw Image Extension on Windows 10 Version 1809 for HoloLens Raw Image Extension on Windows 10 Version 21H2 for 32-bit Systems Raw Image Extension on Windows 10 Version 21H2 for ARM64-based Systems Raw Image Extension on Windows 10 Version 21H2 for x64-based Systems Raw Image Extension on Windows 11 Version 26H2 for ARM64-based Systems Raw Image Extension on Windows 11 Version 26H2 for x64-based Systems Raw Image Extension on Windows 11 version 26H2 Raw Image Extension on Windows 10 for x64-based Systems Raw Image Extension on Windows 10 for 32-bit Systems Raw Image Extension on Windows 11 version 21H2 for ARM64-based Systems Raw Image Extension on Windows 11 version 21H2 for x64-based Systems Raw Image Extension on Windows 10 Version 20H2 for ARM64-based Systems Raw Image Extension on Windows 10 Version 20H2 for 32-bit Systems Raw Image Extension on Windows 10 Version 21H1 for 32-bit Systems Raw Image Extension on Windows 10 Version 21H1 for ARM64-based Systems Raw Image Extension on Windows 10 Version 21H1 for x64-based Systems Raw Image Extension on Windows 10 Version 1909 for ARM64-based Systems Raw Image Extension on Windows 10 Version 1909 for x64-based Systems Raw Image Extension on Windows 10 Version 1909 for 32-bit Systems HEVC Video Extensions Microsoft SQL Server 2019 for x64-based Systems (GDR) Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 Windows Server 2022 Windows Server 2022 (Server Core installation) Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems MPEG-2 Video Extension Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft SharePoint Server Subscription Edition Azure App Service for Linux Azure HDInsight Microsoft Defender for Endpoint for Windows Microsoft Exchange Server 2016 Cumulative Update 23 Windows Subsystem for Linux (WSL2) Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 24H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 25H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 23H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H2 Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Azure CLI Microsoft SQL Server 2022 for x64-based Systems (GDR) Microsoft Office for Android Windows Sysinternals Process Monitor Sysinternals Suite Skype for Business Server 2015 CU13 Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems ASP.NET Core 8.0 PowerShell 7.4 Microsoft Exchange Server 2019 Cumulative Update 14 Microsoft Dataverse Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 24H2 for x64-based Systems .NET 8.0 runtime installed on Windows .NET 8.0 runtime installed on Linux .NET 8.0 runtime installed on Mac OS Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2024 for 64-bit editions Microsoft Partner Center .NET 9.0 runtime installed on Linux .NET 9.0 runtime installed on Mac OS .NET 9.0 runtime installed on Windows Windows Server 2025 Windows Server 2025 (Server Core installation) Microsoft Office LTSC for Mac 2024 Microsoft Exchange Server 2019 Cumulative Update 15 Azure AI Foundry ASP.NET Core 9.0 Windows Security App Microsoft Visual Studio 2022 version 17.14 PowerShell 7.5 Microsoft Configuration Manager 2503 Microsoft Exchange Server Subscription Edition RTM azl3 p7zip 16.02-23 on Azure Linux 3.0 azl3 dpdk 23.11.3-1 on Azure Linux 3.0 azl3 libdwarf 0.9.2-1 on Azure Linux 3.0 azl3 libcontainers-common 20240213-3 on Azure Linux 3.0 azl3 gcc 13.2.0-7 on Azure Linux 3.0 azl3 libdb 5.3.28-9 on Azure Linux 3.0 azl3 ansible 2.17.11-1 on Azure Linux 3.0 azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0 azl3 libsmi 0.4.8-29 on Azure Linux 3.0 azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0 Windows 11 Version 25H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Azure Event Grid System Arc Enabled Servers - Azure Connected Machine Agent Microsoft SQL Server 2025 for x64-based Systems (GDR) azl3 wayland 1.22.0-1 on Azure Linux 3.0 azl3 harfbuzz 8.3.0-4 on Azure Linux 3.0 .NET 10.0 runtime installed on Windows .NET 10.0 runtime installed on Mac OS .NET 10.0 runtime installed on Linux Windows 11 version 26H1 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems ASP.NET Core 10.0 azl3 tensorflow 2.16.1-11 on Azure Linux 3.0 azl3 cyrus-sasl 2.1.28-8 on Azure Linux 3.0 azl3 cyrus-sasl-bootstrap 2.1.28-8 on Azure Linux 3.0 azl3 freetype 2.13.2-2 on Azure Linux 3.0 azl3 javapackages-bootstrap 1.14.0-4 on Azure Linux 3.0 PowerShell 7.6 Azure SRE Agent Microsoft PowerToys Microsoft Office 365 for Mac azl3 cni-plugins 1.4.0-6 on Azure Linux 3.0 azl3 opensc 0.27.1-2 on Azure Linux 3.0 azl3 libnfs 5.0.2-2 on Azure Linux 3.0 azl3 gnupg2 2.4.9-3 on Azure Linux 3.0 Azure CycleCloud 8.9.1 azl3 glib-networking 2.78.0-2 on Azure Linux 3.0 Microsoft Configuration Manager 2509 Microsoft Configuration Manager 2603 HEVC Video Extensions from Device Manufacturer on Windows 10 Version 1809 for 32-bit Systems HEVC Video Extensions from Device Manufacturer on Windows 10 Version 1809 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows Server 2019 HEVC Video Extensions from Device Manufacturer on Windows Server 2019 (Server Core installation) HEVC Video Extensions from Device Manufacturer on Windows Server 2022 HEVC Video Extensions from Device Manufacturer on Windows Server 2022 (Server Core installation) HEVC Video Extensions from Device Manufacturer on Windows 10 Version 21H2 for 32-bit Systems HEVC Video Extensions from Device Manufacturer on Windows 10 Version 21H2 for ARM64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 10 Version 21H2 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 10 Version 22H2 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 10 Version 22H2 for ARM64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 10 Version 22H2 for 32-bit Systems HEVC Video Extensions from Device Manufacturer on Windows 11 Version 23H2 for ARM64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 11 Version 23H2 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 11 Version 24H2 for ARM64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 11 Version 24H2 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows Server 2025 HEVC Video Extensions from Device Manufacturer on Windows Server 2025 (Server Core installation) HEVC Video Extensions from Device Manufacturer on Windows 11 Version 25H2 for ARM64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 11 Version 25H2 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 11 version 26H1 for x64-based Systems HEVC Video Extensions from Device Manufacturer on Windows 11 Version 26H1 for ARM64-based Systems HEVC Video Extensions for Licensed Applications azl3 rpm-ostree 2024.4-11 on Azure Linux 3.0 azl3 hdf5 1.14.6-4 on Azure Linux 3.0 azl3 patch 2.7.6-10 on Azure Linux 3.0 azl3 python-py 1.11.0-1 on Azure Linux 3.0 azl3 libsndfile 1.2.2-5 on Azure Linux 3.0 azl3 msgpack 3.3.0-1 on Azure Linux 3.0 azl3 bind 9.20.26-1 on Azure Linux 3.0 azl3 libarchive 3.7.7-7 on Azure Linux 3.0 azl3 haproxy 2.9.11-8 on Azure Linux 3.0 azl3 curl 8.11.1-11 on Azure Linux 3.0 azl3 cmake 3.30.3-15 on Azure Linux 3.0 azl3 squid 6.13-5 on Azure Linux 3.0 Skype for Business Server 2019 CU8 Skype for Business Server Subscription Edition CU1 azl3 dnsmasq 2.93-1 on Azure Linux 3.0 azl3 iscsi-initiator-utils 2.1.12-1 on Azure Linux 3.0 azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 azl3 etcd 3.5.33-1 on Azure Linux 3.0 azl3 opa 0.63.0-5 on Azure Linux 3.0 azl3 qemu 10.1.0-1 on Azure Linux 3.0 .NET 11.0 runtime installed on Windows .NET 11.0 runtime installed on Mac OS .NET 11.0 runtime installed on Linux ASP.NET Core 11.0 azl3 openvmm 0.1.0-1 on Azure Linux 3.0 azl3 ignition-flatcar 2.22.0-6 on Azure Linux 3.0 azl3 nvidia-container-toolkit 1.17.8-4 on Azure Linux 3.0 azl3 moby-engine 25.0.3-20 on Azure Linux 3.0 azl3 golang 1.27.1-1 on Azure Linux 3.0 azl3 edk2 20240524git3e722403cd16-20 on Azure Linux 3.0 azl3 busybox 1.36.1-27 on Azure Linux 3.0 azl3 pytorch 2.2.2-17 on Azure Linux 3.0 azl3 glibc 2.38-21 on Azure Linux 3.0 azl3 rabbitmq-server 3.13.7-9 on Azure Linux 3.0 azl3 openssh 9.8p1-10 on Azure Linux 3.0 azl3 rust 1.75.0-31 on Azure Linux 3.0 azl3 erlang 26.2.5.21-6 on Azure Linux 3.0 azl3 python-virtualenv 20.36.1-6 on Azure Linux 3.0 azl3 clamav 1.5.4-2 on Azure Linux 3.0 azl3 docker-cli 25.0.7-5 on Azure Linux 3.0 azl3 golang 1.26.7-1 on Azure Linux 3.0 azl3 emacs 29.4-6 on Azure Linux 3.0 azl3 mysql 8.0.46-2 on Azure Linux 3.0 Azure DevOps CLI Extension Microsoft Power Apps for Android azl3 cups 2.4.19-1 on Azure Linux 3.0 azure-keyvault-secrets azure-keyvault-keys azure-keyvault-certificates azure-keyvault-administration azure-keyvault-securitydomain azure_security_keyvault_keys (Rust) azure_security_keyvault_certificates (Rust) azure_security_keyvault_secrets (Rust) azl3 expat 2.8.3-2 on Azure Linux 3.0 azl3 nodejs 24.21.0-1 on Azure Linux 3.0 azl3 kubernetes 1.30.10-30 on Azure Linux 3.0 azl3 packer 1.9.5-21 on Azure Linux 3.0 azl3 python3 3.12.14-2 on Azure Linux 3.0 azl3 influxdb 2.7.5-21 on Azure Linux 3.0 azl3 ceph 18.2.2-13 on Azure Linux 3.0 azl3 containerized-data-importer 1.62.0-8 on Azure Linux 3.0 azl3 kubevirt 1.8.4-2 on Azure Linux 3.0 azl3 telegraf 1.31.0-33 on Azure Linux 3.0 azl3 keda 2.14.1-19 on Azure Linux 3.0 azl3 ruby 3.3.5-10 on Azure Linux 3.0 azl3 elixir 1.16.1-3 on Azure Linux 3.0 azl3 cf-cli 8.7.11-9 on Azure Linux 3.0 azl3 containerd2 2.3.4-1 on Azure Linux 3.0 azl3 cri-tools 1.32.0-8 on Azure Linux 3.0 azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0 azl3 docker-compose 2.27.0-14 on Azure Linux 3.0 azl3 flannel 0.24.2-32 on Azure Linux 3.0 azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0 azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0 azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0 azl3 rsyslog 8.2308.0-7 on Azure Linux 3.0 azl3 rust 1.96.1-2 on Azure Linux 3.0 azl3 coredns 1.11.4-21 on Azure Linux 3.0 azl3 azurelinux-image-tools 1.6.0-3 on Azure Linux 3.0 azl3 cert-manager 1.12.15-14 on Azure Linux 3.0 azl3 cloud-provider-kubevirt 0.5.1-9 on Azure Linux 3.0 azl3 kube-vip-cloud-provider 0.0.10-10 on Azure Linux 3.0 azl3 multus 4.0.2-11 on Azure Linux 3.0 azl3 skopeo 1.14.4-13 on Azure Linux 3.0 azl3 kernel 6.6.157.1-1 on Azure Linux 3.0 Microsoft Edge (Chromium-based) azl3 pgbouncer 1.25.2-1 on Azure Linux 3.0 azl3 libslirp 4.9.3-1 on Azure Linux 3.0 azl3 libXi 1.8.1-1 on Azure Linux 3.0 MessagePack 2.5.303 MessagePack 3.1.9 Windows 11 Version 26H2 for ARM64-based Systems Windows 11 Version 26H2 for x64-based Systems azl3 libXtst 1.2.4-1 on Azure Linux 3.0 azl3 mariadb 10.11.19-1 on Azure Linux 3.0 Microsoft Edge (Chromium-based) Microsoft Visual Studio 2026 version 18.10 System.Security.Cryptography.Xml on .NET 8.0 runtime installed on Windows System.Security.Cryptography.Xml on .NET 8.0 runtime installed on Linux System.Security.Cryptography.Xml on .NET 8.0 runtime installed on Mac OS System.Security.Cryptography.Xml on .NET 9.0 runtime installed on Linux System.Security.Cryptography.Xml on .NET 9.0 runtime installed on Mac OS System.Security.Cryptography.Xml on .NET 9.0 runtime installed on Windows System.Security.Cryptography.Xml on .NET 10.0 runtime installed on Windows System.Security.Cryptography.Xml on .NET 10.0 runtime installed on Mac OS System.Security.Cryptography.Xml on .NET 10.0 runtime installed on Linux System.Security.Cryptography.Xml on .NET 11.0 runtime installed on Windows System.Security.Cryptography.Xml on .NET 11.0 runtime installed on Mac OS System.Security.Cryptography.Xml on .NET 11.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Common on .NET 8.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Common on .NET 8.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Common on .NET 8.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Common on .NET 9.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Common on .NET 9.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Common on .NET 9.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Common on .NET 10.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Common on .NET 10.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Common on .NET 10.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Common on .NET 11.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Common on .NET 11.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Common on .NET 11.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Core on .NET 8.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Core on .NET 8.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Core on .NET 8.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Core on .NET 9.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Core on .NET 9.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Core on .NET 9.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Core on .NET 10.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Core on .NET 10.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Core on .NET 10.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Core on .NET 11.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Core on .NET 11.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Core on .NET 11.0 runtime installed on Linux Microsoft.Native.Quic.MsQuic.Schannel on .NET 8.0 runtime installed on Windows Microsoft.Native.Quic.MsQuic.Schannel on .NET 9.0 runtime installed on Windows Microsoft.Native.Quic.MsQuic.Schannel on .NET 10.0 runtime installed on Windows Microsoft.Native.Quic.MsQuic.Schannel on .NET 11.0 runtime installed on Windows System.Security.Cryptography.Pkcs on .NET 8.0 runtime installed on Windows System.Security.Cryptography.Pkcs on .NET 8.0 runtime installed on Linux System.Security.Cryptography.Pkcs on .NET 8.0 runtime installed on Mac OS System.Security.Cryptography.Pkcs on .NET 9.0 runtime installed on Linux System.Security.Cryptography.Pkcs on .NET 9.0 runtime installed on Mac OS System.Security.Cryptography.Pkcs on .NET 9.0 runtime installed on Windows System.Security.Cryptography.Pkcs on .NET 10.0 runtime installed on Windows System.Security.Cryptography.Pkcs on .NET 10.0 runtime installed on Mac OS System.Security.Cryptography.Pkcs on .NET 10.0 runtime installed on Linux System.Security.Cryptography.Pkcs on .NET 11.0 runtime installed on Windows System.Security.Cryptography.Pkcs on .NET 11.0 runtime installed on Mac OS System.Security.Cryptography.Pkcs on .NET 11.0 runtime installed on Linux Microsoft.AspNetCore.Authentication.Negotiate on .NET 8.0 runtime installed on Windows Microsoft.AspNetCore.Authentication.Negotiate on .NET 8.0 runtime installed on Linux Microsoft.AspNetCore.Authentication.Negotiate on .NET 8.0 runtime installed on Mac OS Microsoft.AspNetCore.Authentication.Negotiate on .NET 9.0 runtime installed on Linux Microsoft.AspNetCore.Authentication.Negotiate on .NET 9.0 runtime installed on Mac OS Microsoft.AspNetCore.Authentication.Negotiate on .NET 9.0 runtime installed on Windows Microsoft.AspNetCore.Authentication.Negotiate on .NET 10.0 runtime installed on Windows Microsoft.AspNetCore.Authentication.Negotiate on .NET 10.0 runtime installed on Mac OS Microsoft.AspNetCore.Authentication.Negotiate on .NET 10.0 runtime installed on Linux Microsoft.AspNetCore.Components.WebAssembly.Server Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 8.0 runtime installed on Windows Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 8.0 runtime installed on Linux Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 8.0 runtime installed on Mac OS Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 9.0 runtime installed on Linux Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 9.0 runtime installed on Mac OS Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 9.0 runtime installed on Windows Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 10.0 runtime installed on Windows Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 10.0 runtime installed on Mac OS Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 10.0 runtime installed on Linux Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 11.0 runtime installed on Windows Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 11.0 runtime installed on Mac OS Microsoft.AspNetCore.Components.WebAssembly.Server on .NET 11.0 runtime installed on Linux System.Formats.Cbor on .NET 8.0 runtime installed on Windows System.Formats.Cbor on .NET 8.0 runtime installed on Linux System.Formats.Cbor on .NET 8.0 runtime installed on Mac OS System.Formats.Cbor on .NET 9.0 runtime installed on Linux System.Formats.Cbor on .NET 9.0 runtime installed on Mac OS System.Formats.Cbor on .NET 9.0 runtime installed on Windows System.Formats.Cbor on .NET 10.0 runtime installed on Windows System.Formats.Cbor on .NET 10.0 runtime installed on Mac OS System.Formats.Cbor on .NET 10.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 8.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 8.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 8.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 9.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 9.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 9.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 10.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 10.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 10.0 runtime installed on Linux Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 11.0 runtime installed on Windows Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 11.0 runtime installed on Mac OS Microsoft.AspNetCore.SignalR.Protocols.MessagePack on .NET 11.0 runtime installed on Linux azl3 thrift 0.24.0-1 on Azure Linux 3.0 azl3 qtbase 6.6.3-6 on Azure Linux 3.0 azl3 aspell 0.60.8.1-1 on Azure Linux 3.0 azl3 httpd 2.4.68-1 on Azure Linux 3.0 azl3 vitess 19.0.4-14 on Azure Linux 3.0 Microsoft Identity Client for NodeJS Microsoft Identity Client for NodeJS on Windows 10 Version 22H2 for x64-based Systems Microsoft Entra application proxy Azure API Center Microsoft Bookings azl3 python-twisted 22.10.0-6 on Azure Linux 3.0 azl3 libical 3.0.10-1 on Azure Linux 3.0 azure-storage-blob-batch Microsoft SQL Server 2017 for x64-based Systems (CU31) Microsoft SQL Server 2019 for x64-based Systems (CU32) Microsoft SQL Server 2022 for x64-based Systems (CU27) Microsoft SQL Server 2025 for x64-based Systems (CU9) azl3 krb5 1.21.3-5 on Azure Linux 3.0 azl3 ntfs-3g 2022.10.3-5 on Azure Linux 3.0 azl3 guava 33.0.0-1 on Azure Linux 3.0 azl3 application-gateway-kubernetes-ingress 1.7.7-6 on Azure Linux 3.0 azl3 azcopy 10.25.1-9 on Azure Linux 3.0 azl3 gh 2.101.0-1 on Azure Linux 3.0 azl3 git-lfs 3.6.1-6 on Azure Linux 3.0 azl3 jx 3.10.182-5 on Azure Linux 3.0 azl3 kured 1.15.0-6 on Azure Linux 3.0 azl3 prometheus-node-exporter 1.7.0-5 on Azure Linux 3.0 azl3 prometheus-process-exporter 0.8.2-5 on Azure Linux 3.0 azl3 sriov-network-device-plugin 3.7.0-8 on Azure Linux 3.0 azl3 runc 1.4.3-1 on Azure Linux 3.0 azl3 gnutls 3.8.13-1 on Azure Linux 3.0 Microsoft Paint Linux 3P (Third Party) Distros azl3 libreswan 4.15-3 on Azure Linux 3.0 azl3 python-oauthlib 3.2.2-3 on Azure Linux 3.0 azl3 util-linux 2.40.2-6 on Azure Linux 3.0 azl3 libmspack 0.11alpha-1 on Azure Linux 3.0 azl3 objectweb-asm 9.6-1 on Azure Linux 3.0 azl3 libconfini 1.16.4-1 on Azure Linux 3.0 azl3 mstflint 4.28.0-1 on Azure Linux 3.0 azl3 ntp 4.2.8p17-3 on Azure Linux 3.0 azl3 nginx 1.30.4-1 on Azure Linux 3.0 azl3 moby-engine 25.0.18-1 on Azure Linux 3.0 azl3 rust 1.98.1-1 on Azure Linux 3.0 microsoft-identity-web v3 on v3 microsoft-identity-web v4 azl3 python-msgpack 1.0.5-3 on Azure Linux 3.0 azl3 python-wheel 0.43.0-2 on Azure Linux 3.0 azl3 cifs-utils 7.7-1 on Azure Linux 3.0 azl3 nfs-utils 2.6.4-4 on Azure Linux 3.0 azl4 gcc 15.3.1-1.azl4 on Azure Linux 4.0 Azure Pipelines VM Inspector for Azure Virtual Machines Azure Kubernetes Configuration Service azl3 unbound 1.26.1-1 on Azure Linux 3.0 azl3 brotli 1.1.0-2 on Azure Linux 3.0 .NET 8.0 installed on Windows .NET 8.0 installed on Linux .NET 8.0 installed on Mac OS .NET 9.0 installed on Windows .NET 9.0 installed on Linux .NET 9.0 installed on Mac OS .NET 10.0 installed on Windows .NET 10.0 installed on Linux .NET 10.0 installed on Mac OS .NET 11.0 installed on Windows .NET 11.0 installed on Linux .NET 11.0 installed on Mac OS Microsoft Visual Studio 2019 version 16.11 Microsoft Visual Studio 2026 version 18.11 Microsoft Visual Studio 2026 version 18.12 ASP.NET Core runtime and targeting-pack Linux tarballs (Microsoft-published) Microsoft.AspNetCore.Components.WebAssembly.DevServer .NET source-build Linux tarballs (all archive types) Microsoft Edge (Chromium-based) Microsoft Visual Studio 2017 version 15.9 azl3 debootstrap 1.0.128+nmu2-1 on Azure Linux 3.0 azl3 xorg-x11-server-Xwayland 24.1.13-1 on Azure Linux 3.0 azl3 python-pyasn1 0.4.8-3 on Azure Linux 3.0 azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0 azl3 sqlite 3.44.0-4 on Azure Linux 3.0 azl3 vsftpd 3.0.5-1 on Azure Linux 3.0 azl3 dasel 2.8.1-5 on Azure Linux 3.0 azl3 dcos-cli 1.2.0-22 on Azure Linux 3.0 azl3 kubernetes 1.30.10-31 on Azure Linux 3.0 azl3 afflib 3.7.20-1 on Azure Linux 3.0 azl3 kernel 6.6.159.1-1 on Azure Linux 3.0 azl3 aspell 0.60.8.1-2 on Azure Linux 3.0 azl3 emacs 29.4-7 on Azure Linux 3.0 azl3 busybox 1.36.1-28 on Azure Linux 3.0 azl3 cups 2.4.19-2 on Azure Linux 3.0 azl3 moby-containerd-cc 1.7.7-19 on Azure Linux 3.0 azl3 kata-containers 4.1.0.kata1-2 on Azure Linux 3.0 azl3 kata-containers-cc 3.15.0.aks0-23 on Azure Linux 3.0 azl3 openvmm 0.4.0-1 on Azure Linux 3.0 azl3 libsndfile 1.2.2-7 on Azure Linux 3.0 azl3 python-oauthlib 3.2.2-4 on Azure Linux 3.0 azl3 kubernetes 1.30.10-32 on Azure Linux 3.0 azl3 expat 2.9.0-1 on Azure Linux 3.0 azl3 python3 3.12.16-1 on Azure Linux 3.0 azl3 golang 1.26.10-1 on Azure Linux 3.0 azl3 golang 1.27.3-1 on Azure Linux 3.0 azl3 libical 3.0.10-3 on Azure Linux 3.0 azl3 mstflint 4.28.0-2 on Azure Linux 3.0 azl3 hdf5 1.14.6-6 on Azure Linux 3.0 azl3 python-twisted 22.10.0-7 on Azure Linux 3.0 azl3 cloud-provider-kubevirt 0.5.1-10 on Azure Linux 3.0 azl3 containerd2 2.3.7-1 on Azure Linux 3.0 azl3 cri-tools 1.32.0-10 on Azure Linux 3.0 azl3 prometheus-adapter 0.12.0-12 on Azure Linux 3.0 azl3 docker-buildx 0.14.0-19 on Azure Linux 3.0 azl3 multus 4.0.2-12 on Azure Linux 3.0 azl3 qtbase 6.6.3-7 on Azure Linux 3.0 azl3 packer 1.9.5-23 on Azure Linux 3.0 azl3 containerized-data-importer 1.62.0-9 on Azure Linux 3.0 azl3 skopeo 1.14.4-15 on Azure Linux 3.0 azl3 krb5 1.21.3-6 on Azure Linux 3.0 azl3 guava 33.0.0-2 on Azure Linux 3.0 azl3 javapackages-bootstrap 1.14.0-5 on Azure Linux 3.0 azl3 freetype 2.13.2-3 on Azure Linux 3.0 azl3 nfs-utils 2.6.4-5 on Azure Linux 3.0 azl3 curl 8.11.1-12 on Azure Linux 3.0 azl3 opensc 0.27.1-3 on Azure Linux 3.0 azl3 kubevirt 1.8.4-4 on Azure Linux 3.0 azl3 rabbitmq-server 3.13.7-10 on Azure Linux 3.0 azl3 runc 1.4.3-2 on Azure Linux 3.0 azl3 influxdb 2.7.5-22 on Azure Linux 3.0 azl3 qemu 10.1.0-2 on Azure Linux 3.0 azl3 bind 9.20.29-1 on Azure Linux 3.0 azl3 python-virtualenv 20.36.1-9 on Azure Linux 3.0 azl3 cert-manager 1.12.15-15 on Azure Linux 3.0 azl3 cf-cli 8.7.11-10 on Azure Linux 3.0 azl3 docker-compose 2.27.0-16 on Azure Linux 3.0 azl3 gh 2.102.0-2 on Azure Linux 3.0 azl3 kube-vip-cloud-provider 0.0.10-11 on Azure Linux 3.0 azl3 sriov-network-device-plugin 3.7.0-9 on Azure Linux 3.0 azl3 telegraf 1.31.0-35 on Azure Linux 3.0 azl3 azcopy 10.25.1-10 on Azure Linux 3.0 azl3 docker-cli 25.0.7-6 on Azure Linux 3.0 azl3 vitess 19.0.4-16 on Azure Linux 3.0 azl3 azurelinux-image-tools 1.7.0-2 on Azure Linux 3.0 azl3 coredns 1.11.4-22 on Azure Linux 3.0 azl3 edk2 20240524git3e722403cd16-21 on Azure Linux 3.0 azl3 python-markdown 3.8.2-3 on Azure Linux 3.0 Microsoft .NET Framework 3.5 on Windows Server 2012 Microsoft .NET Framework 3.5 on Windows Server 2012 R2 Microsoft .NET Framework 3.5 on Windows 11 version 26H1 Windows Defender Python-Markdown 3.0 through 3.11.2 Denial of Service via Link Bracket Parsing Mariner VulnCheck Yes CVE-2019-25781 Inefficient Algorithmic Complexity 22358-17084 22358-17084 Important 22358-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22358-17084 Release Notes 22358-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22358-17084 Release Notes 1.0 2026-11-03T01:06:41 <p>Information published.</p> 2.0 2026-11-04T01:45:43 <p>Information published.</p> Dpdk: dpdk: heap out-of-bounds read/write in gso header copy Mariner redhat Yes CVE-2026-100236 Out-of-bounds Write 17527-17084 17527-17084 Important 17527-17084 8.6 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H 17527-17084 Release Notes 17527-17084 Security Update 23.11.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17527-17084 Release Notes 1.0 2026-10-17T01:04:04 <p>Information published.</p> 3.0 2026-10-25T01:46:59 <p>Information published.</p> 2.0 2026-10-24T14:49:33 <p>Information published.</p> NGINX ngx_http_js_module vulnerability Mariner f5 Yes CVE-2026-101019 Interpretation Conflict 22054-17084 22054-17084 Moderate 22054-17084 6.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N 22054-17084 Release Notes 22054-17084 Security Update 1.30.6-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22054-17084 Release Notes 1.0 2026-10-17T01:07:49 <p>Information published.</p> 3.0 2026-11-02T01:48:16 <p>Information published.</p> 2.0 2026-11-01T14:49:21 <p>Information published.</p> Denial of Service via Eager Array Allocation During Deserialization in Guava Mariner Google Yes CVE-2026-102554 Allocation of Resources Without Limits or Throttling 22013-17084 21194-17084 22312-17084 22013-17084 21194-17084 22312-17084 Moderate 22013-17084 Important 21194-17084 Moderate 22312-17084 Release Notes 22013-17084 22312-17084 Security Update 33.0.0-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22013-17084 22312-17084 Release Notes Release Notes 21194-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21194-17084 Release Notes 1.0 2026-10-11T01:08:04 <p>Information published.</p> 2.0 2026-10-12T15:03:24 <p>Information published.</p> 4.0 2026-10-24T01:45:37 <p>Information published.</p> 3.0 2026-10-13T01:18:36 <p>Information published.</p> 6.0 2026-11-04T01:44:39 <p>Information published.</p> 5.0 2026-11-01T14:51:39 <p>Information published.</p> OpenSC card-setcos.c setcos_construct_fci_44 stack-based overflow Mariner VulDB Yes CVE-2026-103531 Stack-based Buffer Overflow 21490-17084 22319-17084 21490-17084 22319-17084 Moderate 21490-17084 Moderate 22319-17084 5.5 5.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C 21490-17084 5.5 5.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C 22319-17084 Release Notes 21490-17084 22319-17084 Security Update 0.27.1-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21490-17084 22319-17084 Release Notes 1.0 2026-10-02T01:01:42 <p>Information published.</p> 2.0 2026-10-14T14:54:46 <p>Information published.</p> 3.0 2026-11-01T14:54:12 <p>Information published.</p> GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/string.hpp computes its capacity check with a signed int ((int)s + 1), so a requested size of 0x7FFFFFFF wraps negative and the backing buffer is never grown. ReadOnlyDict::load() in modules/speller/default/readonly_ws.cpp passes the unvalidated 32-bit size fields from a .rws dictionary header into this path, so a crafted .rws file with a valid endian marker (12345678) and an oversized length field (e.g. lang_name_size = 0x7FFFFFFF) causes attacker-controlled data to be written out of bounds past an undersized heap allocation. An attacker who induces a victim to load a malicious dictionary — for example via aspell dump master <file> — can corrupt heap memory, resulting in denial of service and potentially code execution. Fixed in b830b6e and will be fixed in release 0.60.8.3. Mariner Anthropic Yes CVE-2026-103658 Heap-based Buffer Overflow 21970-17084 22277-17084 21970-17084 22277-17084 Moderate 21970-17084 Moderate 22277-17084 5.9 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U 21970-17084 5.9 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U 22277-17084 Release Notes 21970-17084 22277-17084 Security Update 0.60.8.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21970-17084 22277-17084 Release Notes 2.0 2026-10-24T01:46:30 <p>Information published.</p> 1.0 2026-10-15T01:11:33 <p>Information published.</p> 3.0 2026-11-01T14:46:10 <p>Information published.</p> Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service Mariner redhat Yes CVE-2026-103963 Uncontrolled Resource Consumption 21556-17084 21556-17084 Important 21556-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21556-17084 Release Notes 21556-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21556-17084 Release Notes 1.0 2026-11-03T01:06:23 <p>Information published.</p> Lenient parsing of integers for response body and chunk framing Mariner PSF Yes CVE-2026-103995 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 21897-17084 22291-17084 21897-17084 22291-17084 Low 21897-17084 Low 22291-17084 Release Notes 21897-17084 22291-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21897-17084 22291-17084 Release Notes 4.0 2026-11-04T01:45:08 <p>Information published.</p> 1.0 2026-10-29T01:03:02 <p>Information published.</p> 3.0 2026-11-01T14:46:54 <p>Information published.</p> 2.0 2026-10-31T01:14:53 <p>Information published.</p> Vitess vttablet /twopcz reflected XSS Mariner GitHub_M Yes CVE-2026-104252 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 21972-17084 21972-17084 Important 21972-17084 7.4 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N 21972-17084 Release Notes 21972-17084 Security Update 19.0.4-16 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21972-17084 Release Notes 1.0 2026-10-15T01:09:43 <p>Information published.</p> 3.0 2026-10-30T01:44:05 <p>Information published.</p> 2.0 2026-10-28T14:43:32 <p>Information published.</p> Cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass Mariner redhat Yes CVE-2026-104715 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') 22075-17084 22075-17084 Important 22075-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22075-17084 Release Notes 22075-17084 Security Update 7.9-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22075-17084 Release Notes 3.0 2026-10-30T01:44:49 <p>Information published.</p> 1.0 2026-10-21T01:11:16 <p>Information published.</p> 2.0 2026-10-28T14:44:27 <p>Information published.</p> TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries Mariner EEF Yes CVE-2026-105236 Improper Certificate Validation 21841-17084 21841-17084 Low 21841-17084 Release Notes 21841-17084 Security Update 26.2.5.21-8 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21841-17084 Release Notes 1.0 2026-10-16T01:06:47 <p>Information published.</p> 3.0 2026-10-30T01:44:10 <p>Information published.</p> 2.0 2026-10-28T14:43:38 <p>Information published.</p> Cups: cups: argument injection in mailto notifier via notify-recipient-uri Mariner redhat Yes CVE-2026-105326 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') 21869-17084 22280-17084 21869-17084 22280-17084 Low 21869-17084 Low 22280-17084 2.5 2.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U 21869-17084 2.5 2.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U 22280-17084 Release Notes 21869-17084 22280-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21869-17084 22280-17084 Release Notes 1.0 2026-10-09T01:07:28 <p>Information published.</p> 2.0 2026-11-01T14:50:03 <p>Information published.</p> A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of CVE-2026-48931. The guard that destroys idle keep-alive sockets when unexpected data arrives only runs when the event loop polls for I/O. If an unsolicited response has already reached the socket but has not been read yet when the socket is handed to a new request, for example because the event loop was busy with synchronous work, the guard is removed without seeing it and the data is parsed as the response to the new request. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. Mariner hackerone Yes CVE-2026-105481 Time-of-check Time-of-use (TOCTOU) Race Condition 21891-17084 21891-17084 Moderate 21891-17084 6.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N 21891-17084 Release Notes 21891-17084 Security Update 24.22.1-0 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21891-17084 Release Notes 3.0 2026-10-28T01:45:36 <p>Information published.</p> 2.0 2026-10-26T14:50:24 <p>Information published.</p> 1.0 2026-10-25T01:02:05 <p>Information published.</p> A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse(). This is an incomplete fix of CVE-2026-48930, which only covered dns.lookup() and the net/tls host options. Because the name is passed to c-ares as a C string, resolving attacker.example\0.trusted.example queries attacker.example and returns its records without any error. Applications that validate a hostname, for example against a domain allowlist, and then resolve it with dns.resolve*() can act on records for a different name than the one they validated. This vulnerability affects Node.js 26.x, 24.x, and 22.x. Mariner hackerone Yes CVE-2026-105482 Improper Access Control 21891-17084 21891-17084 Important 21891-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21891-17084 Release Notes 21891-17084 Security Update 24.22.1-0 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21891-17084 Release Notes 3.0 2026-10-28T01:45:13 <p>Information published.</p> 2.0 2026-10-26T14:50:01 <p>Information published.</p> 1.0 2026-10-25T01:01:47 <p>Information published.</p> A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth digits (`１２７.0.0.1`). `tls.checkServerIdentity()` did not recognize such hosts as IP addresses, even though they normalize and resolve to a regular IPv4 address, and matched them against the certificate DNS names and Common Name instead. A certificate containing `DNS:127.0.0.1` or `DNS:*.0.0.1` could therefore be accepted for an IP endpoint it was not issued for. This is a regression introduced after the fix for CVE-2026-48618. This vulnerability affects Node.js **26.x** and **24.x**. Mariner hackerone Yes CVE-2026-105483 Improper Certificate Validation 21891-17084 21891-17084 Important 21891-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21891-17084 Release Notes 21891-17084 Security Update 24.22.1-0 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21891-17084 Release Notes 3.0 2026-10-28T01:45:18 <p>Information published.</p> 2.0 2026-10-26T14:50:05 <p>Information published.</p> 1.0 2026-10-25T01:01:49 <p>Information published.</p> gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory (aka -C) into an existing directory containing a pre-existing symlink, gpgtar can follow that symlink and create or overwrite a file outside the selected extraction directory. The write is limited by the extraction user's filesystem permissions. An archive extracted into a fresh empty directory does not have this risk. Mariner mitre Yes CVE-2026-105712 UNIX Symbolic Link (Symlink) Following 21526-17084 21526-17084 Low 21526-17084 3.6 3.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U 21526-17084 Release Notes 21526-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21526-17084 Release Notes 1.0 2026-10-07T01:02:18 <p>Information published.</p> NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt Mariner Qt Yes CVE-2026-105924 NULL Pointer Dereference 22304-17084 22304-17084 Moderate 22304-17084 Release Notes 22304-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22304-17084 Release Notes 1.0 2026-11-05T01:04:29 <p>Information published.</p> Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt Mariner Qt Yes CVE-2026-105946 Out-of-bounds Read 22304-17084 22304-17084 Moderate 22304-17084 Release Notes 22304-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22304-17084 Release Notes 3.0 2026-11-03T01:47:37 <p>Information published.</p> 2.0 2026-11-01T15:05:44 <p>Information published.</p> 1.0 2026-10-31T01:13:58 <p>Information published.</p> A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a non-canonical IPv4 literal with a leading zero, such as `0127.0.0.1`. `tls.checkServerIdentity()` normalizes the host following the WHATWG URL rules, which read a leading-zero octet as octal (`0127.0.0.1` becomes `87.0.0.1`), while the connection is made through the operating system resolver, which on some platforms such as macOS reads it as decimal (`127.0.0.1`). A server at the connected address can then be authenticated with a certificate issued for another IP address. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. Mariner hackerone Yes CVE-2026-106069 Improper Certificate Validation 21891-17084 21891-17084 Important 21891-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21891-17084 Release Notes 21891-17084 Security Update 24.22.1-0 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21891-17084 Release Notes 3.0 2026-10-28T01:45:23 <p>Information published.</p> 2.0 2026-10-26T14:50:13 <p>Information published.</p> 1.0 2026-10-25T01:01:56 <p>Information published.</p> A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allow-fs-read` or `--allow-fs-write` rule. When the requested path is shorter than the prefix of a wildcard grant, the radix tree lookup stops comparing early and treats the path as a match. For example, `--allow-fs-read=/etc/passwd.*` also allows reading `/etc/passwd`. This requires the wildcard grant to sit directly under the root of the permission tree, for example when it is the only grant for that scope. This is a different root cause from CVE-2026-58043. This vulnerability affects Node.js **26.x**. Mariner hackerone Yes CVE-2026-106071 Improper Access Control 21891-17084 21891-17084 Low 21891-17084 Release Notes 21891-17084 Security Update 24.22.1-0 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21891-17084 Release Notes 3.0 2026-10-28T01:45:04 <p>Information published.</p> 2.0 2026-10-26T14:49:52 <p>Information published.</p> 1.0 2026-10-25T01:01:42 <p>Information published.</p> A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a non-canonical IPv4 spelling, such as `0177.0.0.1`, `0x7f.0.0.1`, `2130706433` or `127.1`. `tls.checkServerIdentity()` did not classify these hosts as IP addresses, but normalized them to their canonical form and matched the result against the certificate DNS names. A certificate containing `DNS:127.0.0.1` and no `IP Address:127.0.0.1` SAN was therefore accepted, while the same certificate is correctly rejected for `127.0.0.1`. Exploitation requires a certificate with a numeric DNS SAN issued by a CA trusted by the client, and a platform resolver that accepts these spellings, such as glibc. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. Mariner hackerone Yes CVE-2026-106072 Improper Certificate Validation 21891-17084 21891-17084 Moderate 21891-17084 6.7 6.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L 21891-17084 Release Notes 21891-17084 Security Update 24.22.1-0 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21891-17084 Release Notes 3.0 2026-10-28T01:45:31 <p>Information published.</p> 2.0 2026-10-26T14:50:21 <p>Information published.</p> 1.0 2026-10-25T01:02:02 <p>Information published.</p> A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission checks. This is an incomplete fix of CVE-2026-21715, which only covered `fs.realpathSync.native()`. As a result, code running under `--permission` with restricted `--allow-fs-read` can still use `fs.realpathSync()` to check file existence, resolve symlink targets, and enumerate filesystem paths outside of permitted directories. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. Mariner hackerone Yes CVE-2026-106073 Improper Access Control 21891-17084 21891-17084 Low 21891-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21891-17084 Release Notes 21891-17084 Security Update 24.22.1-0 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21891-17084 Release Notes 3.0 2026-10-28T01:45:08 <p>Information published.</p> 2.0 2026-10-26T14:49:57 <p>Information published.</p> 1.0 2026-10-25T01:01:44 <p>Information published.</p> A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-snapshot`) and single executable applications built with `useSnapshot`. If any of these functions, or an API that relies on them such as `URL.createObjectURL()`, is called while the snapshot is built, every process started from that snapshot returns the same values until the cache is refilled: up to 127 UUIDs and about 1,000 `randomInt()` values. Identifiers expected to be unique can collide across processes, and values issued by one process can be predicted by observing another. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**. Mariner hackerone Yes CVE-2026-106074 Use of Insufficiently Random Values 21891-17084 21891-17084 Moderate 21891-17084 4.8 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N 21891-17084 Release Notes 21891-17084 Security Update 24.22.1-0 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21891-17084 Release Notes 3.0 2026-10-28T01:45:27 <p>Information published.</p> 2.0 2026-10-26T14:50:17 <p>Information published.</p> 1.0 2026-10-25T01:01:59 <p>Information published.</p> Twisted: IMAP wildcardToRegexp() ReDoS Mariner GitHub_M Yes CVE-2026-106454 Inefficient Regular Expression Complexity 21981-17084 22297-17084 21981-17084 22297-17084 Moderate 21981-17084 Moderate 22297-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21981-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 22297-17084 Release Notes 21981-17084 22297-17084 Security Update 22.10.0-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21981-17084 22297-17084 Release Notes 1.0 2026-10-08T01:15:31 <p>Information published.</p> 2.0 2026-10-14T15:07:07 <p>Information published.</p> 3.0 2026-11-01T14:49:48 <p>Information published.</p> HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata Mariner HDFG Yes CVE-2026-106547 Heap-based Buffer Overflow 21627-17084 21627-17084 Important 21627-17084 Release Notes 21627-17084 Security Update 1.14.6-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21627-17084 Release Notes 1.0 2026-10-08T01:11:04 <p>Information published.</p> 2.0 2026-10-10T15:02:17 <p>Information published.</p> 3.0 2026-10-13T01:54:36 <p>Information published.</p> In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation. Mariner mitre Yes CVE-2026-106552 Relative Path Traversal 21837-17084 21837-17084 Moderate 21837-17084 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-08T01:13:55 <p>Information published.</p> In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt. Mariner mitre Yes CVE-2026-106553 Incorrect Resource Transfer Between Spheres 21837-17084 21837-17084 Low 21837-17084 2.2 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-08T01:14:43 <p>Information published.</p> In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts. Mariner mitre Yes CVE-2026-106555 Incorrect Resource Transfer Between Spheres 21837-17084 21837-17084 Low 21837-17084 2.2 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-08T01:15:06 <p>Information published.</p> In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings. Mariner mitre Yes CVE-2026-106582 Covert Channel 21837-17084 21837-17084 Low 21837-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-08T01:13:07 <p>Information published.</p> In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection. Mariner mitre Yes CVE-2026-106583 Improper Control of Resource Identifiers ('Resource Injection') 21837-17084 21837-17084 Low 21837-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-08T01:11:51 <p>Information published.</p> In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations. Mariner mitre Yes CVE-2026-106584 Off-by-one Error 21837-17084 21837-17084 Low 21837-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-08T01:14:20 <p>Information published.</p> In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data. Mariner mitre Yes CVE-2026-106585 Improper Handling of Highly Compressed Data (Data Amplification) 21837-17084 21837-17084 Moderate 21837-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-08T01:12:44 <p>Information published.</p> In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283. Mariner mitre Yes CVE-2026-106586 Always-Incorrect Control Flow Implementation 21837-17084 21837-17084 Low 21837-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-08T01:12:20 <p>Information published.</p> In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled. Mariner mitre Yes CVE-2026-106587 Access of Resource Using Incompatible Type ('Type Confusion') 21837-17084 21837-17084 Low 21837-17084 3.6 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-08T01:11:28 <p>Information published.</p> Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients Mariner redhat Yes CVE-2026-107161 Heap-based Buffer Overflow 21032-17084 21033-17084 21032-17084 21033-17084 Important 21032-17084 Important 21033-17084 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21032-17084 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21033-17084 Release Notes 21032-17084 21033-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21032-17084 21033-17084 Release Notes 1.0 2026-10-11T01:50:49 <p>Information published.</p> 2.0 2026-10-13T02:44:21 <p>Information published.</p> Application denial of service via integer overflow in BSON value-length validation in MongoDB Go Driver Mariner mongodb Yes CVE-2026-107324 Integer Overflow or Wraparound 21915-17084 21916-17084 21904-17084 21902-17084 21894-17084 21929-17084 21903-17084 22283-17084 22285-17084 21915-17084 21916-17084 21904-17084 21902-17084 21894-17084 21929-17084 21903-17084 22283-17084 22285-17084 Moderate 21915-17084 Moderate 21916-17084 Moderate 21904-17084 Moderate 21902-17084 Moderate 21894-17084 Moderate 21929-17084 Moderate 21903-17084 Moderate 22283-17084 Moderate 22285-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21915-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21916-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21904-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21902-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21894-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21929-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21903-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 22283-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 22285-17084 Release Notes 21915-17084 22283-17084 Security Update 4.1.0.kata1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21915-17084 22283-17084 Release Notes Release Notes 21916-17084 22285-17084 Security Update 3.15.0.aks0-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21916-17084 22285-17084 Release Notes Release Notes 21904-17084 Security Update 2.14.1-22 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21904-17084 Release Notes Release Notes 21902-17084 Security Update 1.8.4-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21902-17084 Release Notes Release Notes 21894-17084 Security Update 1.9.5-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21894-17084 Release Notes Release Notes 21929-17084 Security Update 1.14.4-14 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21929-17084 Release Notes Release Notes 21903-17084 Security Update 1.31.0-35 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21903-17084 Release Notes 1.0 2026-10-11T01:59:30 <p>Information published.</p> 7.0 2026-10-18T01:46:01 <p>Information published.</p> 5.0 2026-10-16T01:51:45 <p>Information published.</p> 2.0 2026-10-12T02:19:42 <p>Information published.</p> 3.0 2026-10-13T02:51:13 <p>Information published.</p> 4.0 2026-10-14T15:22:18 <p>Information published.</p> 12.0 2026-11-04T01:46:43 <p>Information published.</p> 6.0 2026-10-17T14:49:28 <p>Information published.</p> 11.0 2026-11-02T01:46:35 <p>Information published.</p> 9.0 2026-10-31T14:45:48 <p>Information published.</p> 10.0 2026-11-01T14:56:59 <p>Information published.</p> 8.0 2026-10-31T01:04:09 <p>Information published.</p> Application denial of service via missing BSON array length validation in MongoDB Go Driver Mariner mongodb Yes CVE-2026-107325 Improper Validation of Array Index 21915-17084 21916-17084 21904-17084 21902-17084 21894-17084 21929-17084 21903-17084 22283-17084 22285-17084 21915-17084 21916-17084 21904-17084 21902-17084 21894-17084 21929-17084 21903-17084 22283-17084 22285-17084 Moderate 21915-17084 Moderate 21916-17084 Moderate 21904-17084 Moderate 21902-17084 Moderate 21894-17084 Moderate 21929-17084 Moderate 21903-17084 Moderate 22283-17084 Moderate 22285-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21915-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21916-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21904-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21902-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21894-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21929-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21903-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 22283-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 22285-17084 Release Notes 21915-17084 22283-17084 Security Update 4.1.0.kata1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21915-17084 22283-17084 Release Notes Release Notes 21916-17084 22285-17084 Security Update 3.15.0.aks0-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21916-17084 22285-17084 Release Notes Release Notes 21904-17084 Security Update 2.14.1-22 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21904-17084 Release Notes Release Notes 21902-17084 Security Update 1.8.4-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21902-17084 Release Notes Release Notes 21894-17084 Security Update 1.9.5-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21894-17084 Release Notes Release Notes 21929-17084 Security Update 1.14.4-14 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21929-17084 Release Notes Release Notes 21903-17084 Security Update 1.31.0-35 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21903-17084 Release Notes 1.0 2026-10-11T01:58:10 <p>Information published.</p> 7.0 2026-10-18T01:45:16 <p>Information published.</p> 5.0 2026-10-16T01:51:36 <p>Information published.</p> 2.0 2026-10-12T02:19:21 <p>Information published.</p> 3.0 2026-10-13T02:49:27 <p>Information published.</p> 4.0 2026-10-14T15:21:19 <p>Information published.</p> 12.0 2026-11-04T01:46:02 <p>Information published.</p> 6.0 2026-10-17T14:49:06 <p>Information published.</p> 11.0 2026-11-02T01:45:53 <p>Information published.</p> 9.0 2026-10-31T14:44:54 <p>Information published.</p> 10.0 2026-11-01T14:54:41 <p>Information published.</p> 8.0 2026-10-31T01:02:21 <p>Information published.</p> Integer overflow causes an infinite loop in message buffer growth in PgBouncer Mariner PostgreSQL Yes CVE-2026-107348 Integer Overflow or Wraparound 21934-17084 21934-17084 Moderate 21934-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21934-17084 Release Notes 21934-17084 Security Update 1.26.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21934-17084 Release Notes 1.0 2026-10-16T01:06:04 <p>Information published.</p> 2.0 2026-10-17T01:49:02 <p>Information published.</p> Infinite loop on empty option name in startup options parameter in PgBouncer Mariner PostgreSQL Yes CVE-2026-107349 Loop with Unreachable Exit Condition ('Infinite Loop') 21934-17084 21934-17084 Important 21934-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21934-17084 Release Notes 21934-17084 Security Update 1.26.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21934-17084 Release Notes 1.0 2026-10-16T01:05:57 <p>Information published.</p> 2.0 2026-10-17T01:48:57 <p>Information published.</p> Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer Mariner PostgreSQL Yes CVE-2026-107350 Improper Authentication 21934-17084 21934-17084 Important 21934-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21934-17084 Release Notes 21934-17084 Security Update 1.26.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21934-17084 Release Notes 1.0 2026-10-16T01:05:51 <p>Information published.</p> 2.0 2026-10-17T01:48:53 <p>Information published.</p> Cups: null pointer dereference via embedded job ticket comments allows remote denial of service Mariner redhat Yes CVE-2026-107655 NULL Pointer Dereference 21869-17084 22280-17084 21869-17084 22280-17084 Low 21869-17084 Low 22280-17084 4.0 3.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U 21869-17084 4.0 3.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U 22280-17084 Release Notes 21869-17084 22280-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21869-17084 22280-17084 Release Notes 1.0 2026-10-13T01:15:06 <p>Information published.</p> 2.0 2026-11-01T14:45:22 <p>Information published.</p> MIT krb5 through 1.22.2 NULL Pointer Dereference via krb5_rd_cred() Mariner VulnCheck Yes CVE-2026-107778 NULL Pointer Dereference 22011-17084 22309-17084 22011-17084 22309-17084 Moderate 22011-17084 Moderate 22309-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22011-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22309-17084 Release Notes 22011-17084 22309-17084 Security Update 1.21.3-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22011-17084 22309-17084 Release Notes 1.0 2026-10-10T01:02:32 <p>Information published.</p> 2.0 2026-10-24T14:47:03 <p>Information published.</p> 3.0 2026-11-01T14:51:06 <p>Information published.</p> OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing for all pending jobs whenever any client connection has an in-flight Send-Document operation, without matching that connection to the job being examined. A client allowed to reach the IPP service can hold an incomplete HTTP request containing parsed Send-Document headers before operation authorization, preventing unrelated incomplete jobs from expiring. Where Create-Job submission is allowed, incomplete jobs can accumulate until MaxJobs is exhausted and further legitimate print submissions are rejected. The suppression ends when the held connection closes. Mariner mitre Yes CVE-2026-107885 Allocation of Resources Without Limits or Throttling 21869-17084 22280-17084 21869-17084 22280-17084 Low 21869-17084 Low 22280-17084 3.3 3.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P 21869-17084 3.3 3.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P 22280-17084 Release Notes 21869-17084 22280-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21869-17084 22280-17084 Release Notes 1.0 2026-10-10T01:08:53 <p>Information published.</p> 2.0 2026-11-01T14:51:15 <p>Information published.</p> OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->printers without clearing the pointer. If subsequent validation fails, the class retains the dangling pointer; CUPS-Delete-Class subsequently frees the same allocation in cupsdDeletePrinter(). A client authorized to modify and delete classes can cause scheduler-wide denial of service. The default policy requires @SYSTEM privileges. Mariner mitre Yes CVE-2026-107886 Double Free 21869-17084 22280-17084 21869-17084 22280-17084 Low 21869-17084 Low 22280-17084 2.3 2.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:U 21869-17084 2.3 2.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:U 22280-17084 Release Notes 21869-17084 22280-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21869-17084 22280-17084 Release Notes 1.0 2026-10-10T01:09:38 <p>Information published.</p> 2.0 2026-11-01T14:51:24 <p>Information published.</p> OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler dereferences the NULL result of cupsdFindDest() while checking holding_new_jobs. This terminates cupsd and interrupts all queues managed by that process. In some plausible scenarios, an unprivileged submission can trigger this. Mariner mitre Yes CVE-2026-107888 NULL Pointer Dereference 21869-17084 22280-17084 21869-17084 22280-17084 Moderate 21869-17084 Moderate 22280-17084 5.1 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21869-17084 5.1 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22280-17084 Release Notes 21869-17084 22280-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21869-17084 22280-17084 Release Notes 1.0 2026-10-10T01:09:16 <p>Information published.</p> 2.0 2026-11-01T14:51:20 <p>Information published.</p> OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPP_TAG_ZERO, but add_job() converts these separators to IPP_TAG_JOB. During job startup, get_options()/ipp_length() subsequently calls strlen() on a NULL attribute name, terminating cupsd and disrupting all queues. A single crafted Print-Job request can trigger the crash when the client can reach the scheduler and submit jobs to an accepting, enabled queue supporting the submitted document format. Anonymous submission is possible when permitted by listener and access-control configuration. Mariner mitre Yes CVE-2026-107890 NULL Pointer Dereference 21869-17084 22280-17084 21869-17084 22280-17084 Low 21869-17084 Low 22280-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U 21869-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U 22280-17084 Release Notes 21869-17084 22280-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21869-17084 22280-17084 Release Notes 1.0 2026-10-10T01:08:30 <p>Information published.</p> 2.0 2026-11-01T14:51:10 <p>Information published.</p> local interface connection reuse mixup Mariner curl Yes CVE-2026-107929 21840-17084 22318-17084 21840-17084 22318-17084 Important 21840-17084 Low 22318-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21840-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 22318-17084 Release Notes 21840-17084 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21840-17084 22318-17084 Release Notes 1.0 2026-10-23T01:06:55 <p>Information published.</p> 4.0 2026-11-04T14:44:04 <p>Information published.</p> 3.0 2026-11-01T14:52:17 <p>Information published.</p> 2.0 2026-10-28T01:47:25 <p>Information published.</p> Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix Mariner redhat Yes CVE-2026-108119 Improper Link Resolution Before File Access ('Link Following') 21821-17084 22279-17084 21821-17084 22279-17084 Moderate 21821-17084 Moderate 22279-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H 21821-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H 22279-17084 Release Notes 21821-17084 22279-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21821-17084 22279-17084 Release Notes 1.0 2026-10-13T01:14:44 <p>Information published.</p> 2.0 2026-11-01T14:45:15 <p>Information published.</p> GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue exists because of an incomplete fix for CVE-2026-79992. Mariner mitre Yes CVE-2026-108976 Incomplete List of Disallowed Inputs 21861-17084 22278-17084 21861-17084 22278-17084 Important 21861-17084 Important 22278-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21861-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 22278-17084 Release Notes 21861-17084 22278-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21861-17084 22278-17084 Release Notes 1.0 2026-10-13T01:14:00 <p>Information published.</p> 2.0 2026-11-01T14:45:10 <p>Information published.</p> ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored. Mariner mitre Yes CVE-2026-108985 Out-of-bounds Write 21515-17084 21515-17084 Important 21515-17084 7.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H 21515-17084 Release Notes 21515-17084 Security Update 5.0.2-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21515-17084 Release Notes 2.0 2026-10-24T01:46:20 <p>Information published.</p> 1.0 2026-10-13T01:14:22 <p>Information published.</p> 3.0 2026-10-25T01:46:45 <p>Information published.</p> libXtst RECORD EnableContext Reply Endless Loop Mariner suse Yes CVE-2026-109088 Loop with Unreachable Exit Condition ('Infinite Loop') 21949-17084 21949-17084 Moderate 21949-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21949-17084 Release Notes 21949-17084 Security Update 1.2.6-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21949-17084 Release Notes 2.0 2026-11-04T14:44:45 <p>Information published.</p> 1.0 2026-10-29T01:01:57 <p>Information published.</p> libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow Mariner suse Yes CVE-2026-109089 Heap-based Buffer Overflow 21941-17084 21941-17084 Important 21941-17084 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21941-17084 Release Notes 21941-17084 Security Update 1.8.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21941-17084 Release Notes 2.0 2026-11-04T01:45:00 <p>Information published.</p> 1.0 2026-10-29T01:01:46 <p>Information published.</p> libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow Mariner suse Yes CVE-2026-109090 Heap-based Buffer Overflow 21941-17084 21941-17084 Important 21941-17084 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21941-17084 Release Notes 21941-17084 Security Update 1.8.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21941-17084 Release Notes 2.0 2026-11-04T01:45:05 <p>Information published.</p> 1.0 2026-10-29T01:01:51 <p>Information published.</p> gix-pack before 0.75.0 Reachable Assertion DoS via Pack Version 3 Header Mariner VulnCheck Yes CVE-2026-109349 Reachable Assertion 21840-17084 21918-17084 22057-17084 21840-17084 21918-17084 22057-17084 Moderate 21840-17084 Moderate 21918-17084 Moderate 22057-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21840-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21918-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22057-17084 Release Notes 21840-17084 21918-17084 22057-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21840-17084 21918-17084 22057-17084 Release Notes 1.0 2026-10-15T01:13:23 <p>Information published.</p> 2.0 2026-11-01T14:46:20 <p>Information published.</p> Gitoxide gix-pack before 0.75.0 Denial of Service via Pack Header Object Count Mariner VulnCheck Yes CVE-2026-109351 Allocation of Resources Without Limits or Throttling 21840-17084 22057-17084 21840-17084 22057-17084 Important 21840-17084 Important 22057-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21840-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22057-17084 Release Notes 21840-17084 22057-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21840-17084 22057-17084 Release Notes 2.0 2026-10-19T14:42:54 <p>Information published.</p> 1.0 2026-10-19T01:01:21 <p>Information published.</p> Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir Mariner EEF Yes CVE-2026-109821 Improper Validation of Specified Quantity in Input 21906-17084 21906-17084 Moderate 21906-17084 Release Notes 21906-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21906-17084 Release Notes 2.0 2026-11-03T01:45:03 <p>Information published.</p> 1.0 2026-10-31T01:04:29 <p>Information published.</p> libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable Mariner VulDB Yes CVE-2026-109828 Use of Uninitialized Variable 21640-17084 22287-17084 21640-17084 22287-17084 Low 21640-17084 Low 22287-17084 4.3 4.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C 21640-17084 4.3 4.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C 22287-17084 Release Notes 21640-17084 22287-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21640-17084 22287-17084 Release Notes 1.0 2026-10-15T01:09:20 <p>Information published.</p> 2.0 2026-11-01T14:45:52 <p>Information published.</p> OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute Mariner VulnCheck Yes CVE-2026-110257 Memory Allocation with Excessive Size Value 22050-17084 22050-17084 Moderate 22050-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22050-17084 Release Notes 22050-17084 Security Update 9.11.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22050-17084 Release Notes 1.0 2026-10-17T01:06:21 <p>Information published.</p> 4.0 2026-10-30T01:44:40 <p>Information published.</p> 3.0 2026-10-28T14:44:17 <p>Information published.</p> 2.0 2026-10-28T01:45:54 <p>Information published.</p> OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions Mariner VulnCheck Yes CVE-2026-110258 Memory Allocation with Excessive Size Value 22050-17084 22050-17084 Moderate 22050-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22050-17084 Release Notes 22050-17084 Security Update 9.11.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22050-17084 Release Notes 1.0 2026-10-17T01:06:43 <p>Information published.</p> 4.0 2026-10-30T01:44:34 <p>Information published.</p> 3.0 2026-10-28T14:44:07 <p>Information published.</p> 2.0 2026-10-28T01:45:57 <p>Information published.</p> OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions() Mariner VulnCheck Yes CVE-2026-110259 Uncontrolled Recursion 21194-17084 22050-17084 21194-17084 22050-17084 Moderate 21194-17084 Moderate 22050-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21194-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22050-17084 Release Notes 21194-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21194-17084 Release Notes Release Notes 22050-17084 Security Update 9.11.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22050-17084 Release Notes 4.0 2026-11-04T01:50:03 <p>Information published.</p> 3.0 2026-11-02T01:48:56 <p>Information published.</p> 2.0 2026-11-01T15:05:25 <p>Information published.</p> 1.0 2026-10-31T01:13:06 <p>Information published.</p> OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers Mariner VulnCheck Yes CVE-2026-110260 Inefficient Algorithmic Complexity 22050-17084 22050-17084 Moderate 22050-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22050-17084 Release Notes 22050-17084 Security Update 9.11.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22050-17084 Release Notes 1.0 2026-10-17T01:05:46 <p>Information published.</p> 4.0 2026-10-30T01:44:19 <p>Information published.</p> 3.0 2026-10-28T14:43:51 <p>Information published.</p> 2.0 2026-10-28T01:45:48 <p>Information published.</p> OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES Mariner VulnCheck Yes CVE-2026-110261 Inefficient Algorithmic Complexity 22050-17084 22050-17084 Moderate 22050-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22050-17084 Release Notes 22050-17084 Security Update 9.11.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22050-17084 Release Notes 1.0 2026-10-17T01:05:34 <p>Information published.</p> 4.0 2026-10-30T01:44:22 <p>Information published.</p> 3.0 2026-10-28T14:43:54 <p>Information published.</p> 2.0 2026-10-28T01:45:46 <p>Information published.</p> OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter Mariner VulnCheck Yes CVE-2026-110262 Allocation of Resources Without Limits or Throttling 22050-17084 22050-17084 Moderate 22050-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L 22050-17084 Release Notes 22050-17084 Security Update 9.11.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22050-17084 Release Notes 1.0 2026-10-17T01:05:56 <p>Information published.</p> 4.0 2026-10-30T01:44:37 <p>Information published.</p> 3.0 2026-10-28T14:44:12 <p>Information published.</p> 2.0 2026-10-28T01:45:51 <p>Information published.</p> OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader Mariner VulnCheck Yes CVE-2026-110263 Uncontrolled Recursion 22050-17084 22050-17084 Moderate 22050-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22050-17084 Release Notes 22050-17084 Security Update 9.11.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22050-17084 Release Notes 1.0 2026-10-17T01:06:11 <p>Information published.</p> 4.0 2026-10-30T01:44:30 <p>Information published.</p> 3.0 2026-10-28T14:44:03 <p>Information published.</p> 2.0 2026-10-28T01:45:52 <p>Information published.</p> Integer Overflow or Wraparound in GitLab Mariner GitLab Yes CVE-2026-110264 Integer Overflow or Wraparound 21905-17084 21905-17084 Critical 21905-17084 10.0 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 21905-17084 Release Notes 21905-17084 Security Update 3.3.13-0 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21905-17084 Release Notes 4.0 2026-10-28T01:45:50 <p>Information published.</p> 2.1 2026-10-26T14:50:31 <p>Information published.</p> 2.0 2026-10-25T14:44:49 <p>Information published.</p> 1.0 2026-10-25T01:02:18 <p>Information published.</p> 3.0 2026-10-27T01:46:03 <p>Information published.</p> OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter Mariner VulnCheck Yes CVE-2026-110270 Inefficient Algorithmic Complexity 22050-17084 22050-17084 Moderate 22050-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22050-17084 Release Notes 22050-17084 Security Update 9.11.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22050-17084 Release Notes 1.0 2026-10-17T01:06:32 <p>Information published.</p> 4.0 2026-10-30T01:44:44 <p>Information published.</p> 3.0 2026-10-28T14:44:22 <p>Information published.</p> 2.0 2026-10-28T01:45:55 <p>Information published.</p> HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without making progress. The affected thread stays busy at 100% CPU after timeouts expire and after the client disconnects, and repeated requests can consume all worker threads until the process is restarted. Mariner mitre Yes CVE-2026-110354 Loop with Unreachable Exit Condition ('Infinite Loop') 21690-17084 21690-17084 Important 21690-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21690-17084 Release Notes 21690-17084 Security Update 2.9.11-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21690-17084 Release Notes 4.0 2026-10-30T01:45:10 <p>Information published.</p> 2.0 2026-10-26T14:49:48 <p>Information published.</p> 3.0 2026-10-28T14:45:03 <p>Information published.</p> 1.0 2026-10-25T01:01:37 <p>Information published.</p> OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer Mariner VulnCheck Yes CVE-2026-110591 Allocation of Resources Without Limits or Throttling 22050-17084 22050-17084 Moderate 22050-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22050-17084 Release Notes 22050-17084 Security Update 9.11.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22050-17084 Release Notes 1.0 2026-10-17T01:05:24 <p>Information published.</p> 4.0 2026-10-30T01:44:26 <p>Information published.</p> 3.0 2026-10-28T14:43:59 <p>Information published.</p> 2.0 2026-10-28T01:45:45 <p>Information published.</p> libmspack through 0.11alpha Uninitialized Pointer Free via kwajd_open Error Path Mariner VulnCheck Yes CVE-2026-110602 Access of Uninitialized Pointer 21850-17084 22049-17084 21850-17084 22049-17084 Moderate 21850-17084 Moderate 22049-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H 21850-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H 22049-17084 Release Notes 21850-17084 22049-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21850-17084 22049-17084 Release Notes 1.0 2026-10-17T01:03:40 <p>Information published.</p> ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry Mariner VulnCheck Yes CVE-2026-110659 NULL Pointer Dereference 22052-17084 22295-17084 22052-17084 22295-17084 Moderate 22052-17084 Moderate 22295-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22052-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22295-17084 Release Notes 22052-17084 22295-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22052-17084 22295-17084 Release Notes 1.0 2026-10-17T01:07:00 <p>Information published.</p> 2.0 2026-11-01T14:49:04 <p>Information published.</p> libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DEFVAL Mariner VulnCheck Yes CVE-2026-111137 Out-of-bounds Write 20060-17084 20060-17084 Moderate 20060-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H 20060-17084 Release Notes 20060-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20060-17084 Release Notes 1.0 2026-10-17T01:02:06 <p>Information published.</p> libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string Mariner VulnCheck Yes CVE-2026-111269 Out-of-bounds Read 21992-17084 22294-17084 21992-17084 22294-17084 Moderate 21992-17084 Moderate 22294-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H 21992-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H 22294-17084 Release Notes 21992-17084 22294-17084 Security Update 3.0.10-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21992-17084 22294-17084 Release Notes 2.0 2026-10-24T01:46:43 <p>Information published.</p> 1.0 2026-10-17T01:01:58 <p>Information published.</p> 3.0 2026-11-01T14:48:48 <p>Information published.</p> Go: CVE-2026-111943 Distrust compromised intermediate certificates in crypto/x509 Mariner Go Yes CVE-2026-111943 21857-17084 22292-17084 22293-17084 21809-17084 21857-17084 22292-17084 22293-17084 21809-17084 Moderate 21857-17084 Moderate 22292-17084 Moderate 22293-17084 Moderate 21809-17084 7.4 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U 21857-17084 7.4 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U 22292-17084 7.4 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U 22293-17084 7.4 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U 21809-17084 Release Notes 21857-17084 22292-17084 22293-17084 21809-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 22292-17084 22293-17084 21809-17084 Release Notes Praveen Sethuraman 2.0 2026-10-31T01:45:01 <p>Information published.</p> 4.0 2026-11-01T14:54:29 <p>Information published.</p> 1.0 2026-10-28T01:47:48 <p>Information published.</p> 3.0 2026-11-01T02:44:47 <p>Information published.</p> virtualenv: Downloaded wheel selection and caching precede verification Mariner GitHub_M Yes CVE-2026-113714 Improper Validation of Integrity Check Value 22336-17084 22336-17084 Low 22336-17084 Release Notes 22336-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22336-17084 Release Notes 2.0 2026-11-04T14:45:58 <p>Information published.</p> 1.0 2026-11-04T01:02:56 <p>Information published.</p> virtualenv: Pip seeding with download omits wheel digest verification Mariner GitHub_M Yes CVE-2026-113717 Download of Code Without Integrity Check 22336-17084 22336-17084 Low 22336-17084 Release Notes 22336-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22336-17084 Release Notes 2.0 2026-11-04T14:46:02 <p>Information published.</p> 1.0 2026-11-04T01:02:59 <p>Information published.</p> virtualenv: Deletion recovery can change a symlink target's mode Mariner GitHub_M Yes CVE-2026-113724 Improper Link Resolution Before File Access 21846-17084 21846-17084 Moderate 21846-17084 4.5 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L 21846-17084 Release Notes 21846-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21846-17084 Release Notes 3.0 2026-11-04T01:45:51 <p>Information published.</p> 1.0 2026-10-30T01:02:48 <p>Information published.</p> 2.0 2026-11-01T14:59:40 <p>Information published.</p> tar filter allows writing outside destination via empty-named symlink Mariner PSF Yes CVE-2026-114583 21897-17084 21897-17084 Moderate 21897-17084 Release Notes 21897-17084 Security Update 3.12.16-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21897-17084 Release Notes 2.0 2026-10-25T01:02:11 <p>Information published.</p> 6.0 2026-10-30T01:45:06 <p>Information published.</p> 1.0 2026-10-24T01:01:36 <p>Information published.</p> 3.0 2026-10-26T01:48:59 <p>Information published.</p> 5.0 2026-10-28T14:44:50 <p>Information published.</p> 4.0 2026-10-28T01:48:59 <p>Information published.</p> MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure Mariner GitHub_M Yes CVE-2026-114613 Missing Release of Memory after Effective Lifetime 22073-17084 22073-17084 Important 22073-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22073-17084 Release Notes 22073-17084 Security Update 1.2.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22073-17084 Release Notes 4.0 2026-11-02T01:48:29 <p>Information published.</p> 2.0 2026-10-26T14:50:09 <p>Information published.</p> 3.0 2026-10-31T14:47:58 <p>Information published.</p> 1.0 2026-10-25T01:01:54 <p>Information published.</p> Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std Mariner redhat Yes CVE-2026-114690 Out-of-bounds Write 18315-17084 18315-17084 Moderate 18315-17084 6.2 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18315-17084 Release Notes 18315-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18315-17084 Release Notes 1.0 2026-11-03T01:06:09 <p>Information published.</p> Gcc: integer wrap in `std Mariner redhat Yes CVE-2026-114691 Integer Overflow or Wraparound 18315-17084 18315-17084 Moderate 18315-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 18315-17084 Release Notes 18315-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18315-17084 Release Notes 1.0 2026-11-03T01:06:15 <p>Information published.</p> Patch: filename validation bypass in reversal fallback allows file creation outside the working directory Mariner redhat Yes CVE-2026-115207 Improper Limitation of a Pathname to a Restricted Directory 21634-17084 21634-17084 Moderate 21634-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U 21634-17084 Release Notes 21634-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21634-17084 Release Notes 2.0 2026-11-03T01:46:48 <p>Information published.</p> 1.0 2026-10-31T01:13:08 <p>Information published.</p> Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via try_call Mariner VulnCheck Yes CVE-2026-115379 Use After Free 22057-17084 21918-17084 22057-17084 21918-17084 Moderate 22057-17084 Moderate 21918-17084 5.7 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H 22057-17084 5.7 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H 21918-17084 Release Notes 22057-17084 21918-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22057-17084 21918-17084 Release Notes 3.0 2026-10-28T01:45:56 <p>Information published.</p> 4.0 2026-11-01T14:45:58 <p>Information published.</p> 1.0 2026-10-25T01:02:24 <p>Information published.</p> 2.0 2026-10-27T01:46:17 <p>Information published.</p> Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 GC Heap Corruption via Tag Imports Mariner VulnCheck Yes CVE-2026-115383 Improper Validation of Specified Type of Input 22057-17084 21789-17084 21918-17084 22057-17084 21789-17084 21918-17084 Moderate 22057-17084 Moderate 21789-17084 Moderate 21918-17084 4.8 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H 22057-17084 4.8 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H 21789-17084 4.8 4.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H 21918-17084 Release Notes 22057-17084 21789-17084 21918-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22057-17084 21789-17084 21918-17084 Release Notes 3.0 2026-10-28T01:45:58 <p>Information published.</p> 5.0 2026-11-04T01:44:51 <p>Information published.</p> 4.0 2026-11-01T14:45:53 <p>Information published.</p> 1.0 2026-10-25T01:05:39 <p>Information published.</p> 2.0 2026-10-27T01:45:52 <p>Information published.</p> Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest Mariner redhat Yes CVE-2026-115449 Exposure of Sensitive Information to an Unauthorized Actor 21935-17084 21935-17084 21935-17084 3.5 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N 21935-17084 Release Notes 21935-17084 Security Update 4.9.6-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21935-17084 Release Notes 2.0 2026-10-28T01:44:58 <p>Information published.</p> 1.0 2026-10-25T01:01:40 <p>Information published.</p> Gcc: stack overflow in std::bitset on libstdc++ Mariner redhat Yes CVE-2026-115455 Out-of-bounds Write 18315-17084 18315-17084 Moderate 18315-17084 6.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H 18315-17084 Release Notes 18315-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18315-17084 Release Notes 1.0 2026-11-03T01:06:02 <p>Information published.</p> Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg Mariner redhat Yes CVE-2026-115484 Out-of-bounds Read 21749-17084 21749-17084 Important 21749-17084 7.6 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U 21749-17084 Release Notes 21749-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21749-17084 Release Notes 1.0 2026-10-29T01:09:20 <p>Information published.</p> Open-iscsi: open-iscsi: dhcpv6 vendor option strlen heap out-of-bounds read and 1-byte write in iscsiuio Mariner redhat Yes CVE-2026-115485 Out-of-bounds Read 21749-17084 21749-17084 Moderate 21749-17084 6.3 5.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U 21749-17084 Release Notes 21749-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21749-17084 Release Notes 1.0 2026-10-29T01:09:09 <p>Information published.</p> Open-iscsi: open-iscsi: ipv6 neighbor discovery missing option length validation in iscsiuio allows arp table poisoning Mariner redhat Yes CVE-2026-115486 Out-of-bounds Read 21749-17084 21749-17084 Moderate 21749-17084 7.1 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L/E:U 21749-17084 Release Notes 21749-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21749-17084 Release Notes 1.0 2026-10-29T01:09:14 <p>Information published.</p> libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay Mariner VulnCheck Yes CVE-2026-115506 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') 21887-17084 22290-17084 21887-17084 22290-17084 Important 21887-17084 Important 22290-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21887-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22290-17084 Release Notes 21887-17084 22290-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21887-17084 22290-17084 Release Notes 4.0 2026-10-28T01:44:53 <p>Information published.</p> 1.0 2026-10-24T01:01:26 <p>Information published.</p> 3.0 2026-10-26T01:48:53 <p>Information published.</p> 5.0 2026-11-01T15:00:02 <p>Information published.</p> 2.0 2026-10-25T01:01:33 <p>Information published.</p> Distrust compromised intermediate certificates in ssl module Mariner PSF Yes CVE-2026-115557 Improper Check for Certificate Revocation 21897-17084 21897-17084 Critical 21897-17084 Release Notes 21897-17084 Security Update 3.12.15-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21897-17084 Release Notes 4.0 2026-10-28T01:46:00 <p>Information published.</p> 2.0 2026-10-26T14:50:42 <p>Information published.</p> 1.0 2026-10-26T01:03:15 <p>Information published.</p> 3.0 2026-10-27T01:46:22 <p>Information published.</p> Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH Mariner GitHub_M Yes CVE-2026-115774 Uncontrolled Resource Consumption 21981-17084 22297-17084 21981-17084 22297-17084 Moderate 21981-17084 Moderate 22297-17084 4.9 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U 21981-17084 4.9 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U 22297-17084 Release Notes 21981-17084 22297-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21981-17084 22297-17084 Release Notes 1.0 2026-10-29T01:09:57 <p>Information published.</p> 2.0 2026-11-01T14:54:37 <p>Information published.</p> Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree Mariner GitHub_M Yes CVE-2026-115775 Uncontrolled Resource Consumption 21981-17084 22297-17084 21981-17084 22297-17084 Moderate 21981-17084 Moderate 22297-17084 Release Notes 21981-17084 22297-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21981-17084 22297-17084 Release Notes 1.0 2026-10-29T01:10:08 <p>Information published.</p> 2.0 2026-11-01T14:56:04 <p>Information published.</p> Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer Mariner GitHub_M Yes CVE-2026-115776 Uncontrolled Resource Consumption 21981-17084 22297-17084 21981-17084 22297-17084 Moderate 21981-17084 Moderate 22297-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21981-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22297-17084 Release Notes 21981-17084 22297-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21981-17084 22297-17084 Release Notes 1.0 2026-10-29T01:09:47 <p>Information published.</p> 2.0 2026-11-01T14:54:28 <p>Information published.</p> Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer Mariner GitHub_M Yes CVE-2026-115778 Uncontrolled Resource Consumption 21981-17084 22297-17084 21981-17084 22297-17084 Moderate 21981-17084 Moderate 22297-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21981-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22297-17084 Release Notes 21981-17084 22297-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21981-17084 22297-17084 Release Notes 1.0 2026-10-29T01:09:52 <p>Information published.</p> 2.0 2026-11-01T14:54:33 <p>Information published.</p> Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value Mariner GitHub_M Yes CVE-2026-115877 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 21981-17084 22297-17084 21981-17084 22297-17084 Moderate 21981-17084 Moderate 22297-17084 5.4 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N/E:U 21981-17084 5.4 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N/E:U 22297-17084 Release Notes 21981-17084 22297-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21981-17084 22297-17084 Release Notes 1.0 2026-10-29T01:09:42 <p>Information published.</p> 2.0 2026-11-01T14:54:23 <p>Information published.</p> Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation Mariner GitHub_M Yes CVE-2026-115889 Numeric Truncation Error 21918-17084 21918-17084 Critical 21918-17084 9.9 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H/E:U 21918-17084 Release Notes 21918-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21918-17084 Release Notes 3.0 2026-11-04T01:45:26 <p>Information published.</p> 1.0 2026-10-29T01:13:22 <p>Information published.</p> 2.0 2026-11-01T14:56:24 <p>Information published.</p> Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction Mariner GitHub_M Yes CVE-2026-115893 Insufficient Control Flow Management 21918-17084 21918-17084 Critical 21918-17084 9.9 9.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U 21918-17084 Release Notes 21918-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21918-17084 Release Notes 3.0 2026-11-04T01:45:22 <p>Information published.</p> 1.0 2026-10-29T01:13:07 <p>Information published.</p> 2.0 2026-11-01T14:56:17 <p>Information published.</p> zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE Mariner GitHub_M Yes CVE-2026-115905 Improper Input Validation 22057-17084 21918-17084 22057-17084 21918-17084 Critical 22057-17084 Critical 21918-17084 Release Notes 22057-17084 21918-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22057-17084 21918-17084 Release Notes 3.0 2026-11-04T01:44:50 <p>Information published.</p> 2.0 2026-11-01T14:56:27 <p>Information published.</p> 1.0 2026-10-31T01:14:49 <p>Information published.</p> zip: AES Entry HMAC Authentication Bypass on Premature EOF Mariner GitHub_M Yes CVE-2026-115906 Improper Validation of Integrity Check Value 22057-17084 21840-17084 22057-17084 21840-17084 Moderate 22057-17084 Moderate 21840-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 22057-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U 21840-17084 Release Notes 22057-17084 21840-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22057-17084 21840-17084 Release Notes 3.0 2026-11-03T01:49:16 <p>Information published.</p> 2.0 2026-11-01T14:56:14 <p>Information published.</p> 1.0 2026-10-31T01:14:30 <p>Information published.</p> zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction Mariner GitHub_M Yes CVE-2026-115909 Uncontrolled Resource Consumption 22057-17084 21918-17084 22057-17084 21918-17084 Moderate 22057-17084 Moderate 21918-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22057-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21918-17084 Release Notes 22057-17084 21918-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22057-17084 21918-17084 Release Notes 3.0 2026-11-04T01:44:48 <p>Information published.</p> 2.0 2026-11-01T14:56:21 <p>Information published.</p> 1.0 2026-10-31T01:14:39 <p>Information published.</p> ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check) Mariner GitHub_M Yes CVE-2026-115919 Out-of-bounds Read 21823-17084 21823-17084 Moderate 21823-17084 6.2 5.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21823-17084 Release Notes 21823-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21823-17084 Release Notes 2.0 2026-11-03T01:47:28 <p>Information published.</p> 1.0 2026-10-31T01:13:45 <p>Information published.</p> ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank Mariner GitHub_M Yes CVE-2026-115920 Out-of-bounds Read 21823-17084 21823-17084 Moderate 21823-17084 6.2 5.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21823-17084 Release Notes 21823-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21823-17084 Release Notes 2.0 2026-11-03T01:47:33 <p>Information published.</p> 1.0 2026-10-31T01:13:48 <p>Information published.</p> ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute Mariner GitHub_M Yes CVE-2026-115921 Signed to Unsigned Conversion Error 21823-17084 21823-17084 Moderate 21823-17084 6.2 5.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21823-17084 Release Notes 21823-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21823-17084 Release Notes 2.0 2026-11-03T01:47:24 <p>Information published.</p> 1.0 2026-10-31T01:13:42 <p>Information published.</p> socket.getaddrinfo() accepts embedded null bytes in host and port Mariner PSF Yes CVE-2026-116566 Improper Neutralization of Null Byte or NUL Character 22291-17084 21897-17084 22291-17084 21897-17084 Moderate 22291-17084 Moderate 21897-17084 Release Notes 22291-17084 21897-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22291-17084 21897-17084 Release Notes 3.0 2026-11-04T01:45:54 <p>Information published.</p> 2.0 2026-11-01T14:59:52 <p>Information published.</p> 1.0 2026-10-31T01:01:34 <p>Information published.</p> Go JOSE: Panic during CBC-HMAC processing Mariner GitHub_M Yes CVE-2026-116585 Improper Validation of Array Index 22346-17084 22338-17084 22299-17084 22307-17084 22329-17084 22289-17084 22281-17084 22305-17084 22308-17084 22345-17084 22348-17084 22271-17084 21796-17084 22346-17084 22338-17084 22299-17084 22307-17084 22329-17084 22289-17084 22281-17084 22305-17084 22308-17084 22345-17084 22348-17084 22271-17084 21796-17084 Moderate 22346-17084 Moderate 22338-17084 Moderate 22299-17084 Moderate 22307-17084 Moderate 22329-17084 Moderate 22289-17084 Moderate 22281-17084 Moderate 22305-17084 Moderate 22308-17084 Moderate 22345-17084 Moderate 22348-17084 Moderate 22271-17084 Moderate 21796-17084 Release Notes 22346-17084 22338-17084 22299-17084 22307-17084 22329-17084 22289-17084 22281-17084 22305-17084 22308-17084 22345-17084 22348-17084 22271-17084 21796-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22346-17084 22338-17084 22299-17084 22307-17084 22329-17084 22289-17084 22281-17084 22305-17084 22308-17084 22345-17084 22348-17084 22271-17084 21796-17084 Release Notes 4.0 2026-11-04T01:49:43 <p>Information published.</p> 3.0 2026-11-03T01:46:35 <p>Information published.</p> 2.0 2026-11-01T15:03:33 <p>Information published.</p> 1.0 2026-10-31T01:09:42 <p>Information published.</p> Go JOSE: Panics in JSON parsing Mariner GitHub_M Yes CVE-2026-116586 Uncontrolled Recursion 22346-17084 22338-17084 22299-17084 22307-17084 22329-17084 22289-17084 22281-17084 22305-17084 22308-17084 22345-17084 22348-17084 22271-17084 21796-17084 22346-17084 22338-17084 22299-17084 22307-17084 22329-17084 22289-17084 22281-17084 22305-17084 22308-17084 22345-17084 22348-17084 22271-17084 21796-17084 Moderate 22346-17084 Moderate 22338-17084 Moderate 22299-17084 Moderate 22307-17084 Moderate 22329-17084 Moderate 22289-17084 Moderate 22281-17084 Moderate 22305-17084 Moderate 22308-17084 Moderate 22345-17084 Moderate 22348-17084 Moderate 22271-17084 Moderate 21796-17084 Release Notes 22346-17084 22338-17084 22299-17084 22307-17084 22329-17084 22289-17084 22281-17084 22305-17084 22308-17084 22345-17084 22348-17084 22271-17084 21796-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22346-17084 22338-17084 22299-17084 22307-17084 22329-17084 22289-17084 22281-17084 22305-17084 22308-17084 22345-17084 22348-17084 22271-17084 21796-17084 Release Notes 5.0 2026-11-04T01:49:21 <p>Information published.</p> 3.0 2026-11-02T14:49:48 <p>Information published.</p> 4.0 2026-11-03T01:45:44 <p>Information published.</p> 2.0 2026-11-01T15:02:31 <p>Information published.</p> 1.0 2026-10-31T01:08:21 <p>Information published.</p> Go JOSE: DoS when parsing JWKs that contain RSA keys Mariner GitHub_M Yes CVE-2026-116587 Inefficient Algorithmic Complexity 22346-17084 22338-17084 22299-17084 22307-17084 22329-17084 22289-17084 22281-17084 22305-17084 22308-17084 22345-17084 22348-17084 22016-17084 21925-17084 21908-17084 21901-17084 22271-17084 21796-17084 21899-17084 21904-17084 21893-17084 21913-17084 21894-17084 21929-17084 21903-17084 21972-17084 22346-17084 22338-17084 22299-17084 22307-17084 22329-17084 22289-17084 22281-17084 22305-17084 22308-17084 22345-17084 22348-17084 22016-17084 21925-17084 21908-17084 21901-17084 22271-17084 21796-17084 21899-17084 21904-17084 21893-17084 21913-17084 21894-17084 21929-17084 21903-17084 21972-17084 Moderate 22346-17084 Moderate 22338-17084 Moderate 22299-17084 Moderate 22307-17084 Moderate 22329-17084 Moderate 22289-17084 Moderate 22281-17084 Moderate 22305-17084 Moderate 22308-17084 Moderate 22345-17084 Moderate 22348-17084 Moderate 22016-17084 Moderate 21925-17084 Moderate 21908-17084 Moderate 21901-17084 Moderate 22271-17084 Moderate 21796-17084 Moderate 21899-17084 Moderate 21904-17084 Moderate 21893-17084 Moderate 21913-17084 Moderate 21894-17084 Moderate 21929-17084 Moderate 21903-17084 Moderate 21972-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22346-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22338-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22299-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22307-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22329-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22289-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22281-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22305-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22308-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22345-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22348-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22016-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21925-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21908-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21901-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22271-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21796-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21899-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21904-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21893-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21913-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21894-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21929-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21903-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21972-17084 Release Notes 22346-17084 22338-17084 22299-17084 22307-17084 22329-17084 22289-17084 22281-17084 22305-17084 22308-17084 22345-17084 22348-17084 22016-17084 21925-17084 21908-17084 21901-17084 22271-17084 21796-17084 21899-17084 21904-17084 21893-17084 21913-17084 21894-17084 21929-17084 21903-17084 21972-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22346-17084 22338-17084 22299-17084 22307-17084 22329-17084 22289-17084 22281-17084 22305-17084 22308-17084 22345-17084 22348-17084 22016-17084 21925-17084 21908-17084 21901-17084 22271-17084 21796-17084 21899-17084 21904-17084 21893-17084 21913-17084 21894-17084 21929-17084 21903-17084 21972-17084 Release Notes 3.0 2026-11-04T01:49:32 <p>Information published.</p> 2.0 2026-11-01T15:03:15 <p>Information published.</p> 1.0 2026-10-31T01:09:20 <p>Information published.</p> compress zstd: Panic on two-block frames Mariner GitHub_M Yes CVE-2026-116591 Integer Overflow or Wraparound 22349-17084 22338-17084 22299-17084 22307-17084 22350-17084 22302-17084 22347-17084 22340-17084 22341-17084 22329-17084 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22305-17084 22308-17084 22345-17084 22348-17084 21923-17084 21925-17084 21908-17084 21901-17084 21921-17084 21910-17084 21856-17084 21911-17084 22017-17084 21899-17084 21915-17084 21916-17084 21904-17084 22272-17084 21913-17084 21807-17084 21772-17084 21894-17084 21929-17084 21903-17084 21972-17084 22349-17084 22338-17084 22299-17084 22307-17084 22350-17084 22302-17084 22347-17084 22340-17084 22341-17084 22329-17084 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22305-17084 22308-17084 22345-17084 22348-17084 21923-17084 21925-17084 21908-17084 21901-17084 21921-17084 21910-17084 21856-17084 21911-17084 22017-17084 21899-17084 21915-17084 21916-17084 21904-17084 22272-17084 21913-17084 21807-17084 21772-17084 21894-17084 21929-17084 21903-17084 21972-17084 Moderate 22349-17084 Moderate 22338-17084 Moderate 22299-17084 Moderate 22307-17084 Moderate 22350-17084 Moderate 22302-17084 Moderate 22347-17084 Moderate 22340-17084 Moderate 22341-17084 Moderate 22329-17084 Moderate 22283-17084 Moderate 22285-17084 Moderate 22289-17084 Moderate 22281-17084 Moderate 22055-17084 Moderate 22305-17084 Moderate 22308-17084 Moderate 22345-17084 Moderate 22348-17084 Moderate 21923-17084 Moderate 21925-17084 Moderate 21908-17084 Moderate 21901-17084 Moderate 21921-17084 Moderate 21910-17084 Moderate 21856-17084 Moderate 21911-17084 Moderate 22017-17084 Moderate 21899-17084 Moderate 21915-17084 Moderate 21916-17084 Moderate 21904-17084 Moderate 22272-17084 Moderate 21913-17084 Moderate 21807-17084 Moderate 21772-17084 Moderate 21894-17084 Moderate 21929-17084 Moderate 21903-17084 Moderate 21972-17084 Release Notes 22349-17084 22338-17084 22299-17084 22307-17084 22350-17084 22302-17084 22347-17084 22340-17084 22341-17084 22329-17084 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22305-17084 22308-17084 22345-17084 22348-17084 21923-17084 21925-17084 21908-17084 21901-17084 21921-17084 21910-17084 21856-17084 21911-17084 22017-17084 21899-17084 21915-17084 21916-17084 21904-17084 22272-17084 21913-17084 21807-17084 21772-17084 21894-17084 21929-17084 21903-17084 21972-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22349-17084 22338-17084 22299-17084 22307-17084 22350-17084 22302-17084 22347-17084 22340-17084 22341-17084 22329-17084 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22305-17084 22308-17084 22345-17084 22348-17084 21923-17084 21925-17084 21908-17084 21901-17084 21921-17084 21910-17084 21856-17084 21911-17084 22017-17084 21899-17084 21915-17084 21916-17084 21904-17084 22272-17084 21913-17084 21807-17084 21772-17084 21894-17084 21929-17084 21903-17084 21972-17084 Release Notes 3.0 2026-11-04T01:49:57 <p>Information published.</p> 2.0 2026-11-01T15:05:03 <p>Information published.</p> 1.0 2026-10-31T01:11:20 <p>Information published.</p> Tencent RapidJSON Regex stream.h Take out-of-bounds Mariner VulDB Yes CVE-2026-116620 Out-of-bounds Read 0-17084 0-17084 Moderate 0-17084 7.3 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C 0-17084 Release Notes 0-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-28T01:01:57 <p>Information published.</p> libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table Mariner VulnCheck Yes CVE-2026-116732 Out-of-bounds Read 17736-17084 17736-17084 Moderate 17736-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 17736-17084 Release Notes 17736-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17736-17084 Release Notes 1.0 2026-10-28T01:01:47 <p>Information published.</p> zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface() Mariner VulnCheck Yes CVE-2026-117556 Out-of-bounds Read 0-17084 0-17084 Moderate 0-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L 0-17084 Release Notes 0-17084 Security Update 1.5.5-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 3.0 2026-11-02T01:48:33 <p>Information published.</p> 1.0 2026-10-29T01:03:15 <p>Information published.</p> 2.0 2026-10-31T14:48:03 <p>Information published.</p> libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser Mariner VulnCheck Yes CVE-2026-117610 NULL Pointer Dereference 21887-17084 22290-17084 21887-17084 22290-17084 Moderate 21887-17084 Moderate 22290-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21887-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 22290-17084 Release Notes 21887-17084 22290-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21887-17084 22290-17084 Release Notes 4.0 2026-11-04T01:44:53 <p>Information published.</p> 1.0 2026-10-29T01:01:30 <p>Information published.</p> 2.0 2026-11-01T14:46:28 <p>Information published.</p> 3.0 2026-11-03T01:02:42 <p>Information published.</p> libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes Mariner VulnCheck Yes CVE-2026-118370 Integer Overflow or Wraparound 21887-17084 22290-17084 21887-17084 22290-17084 Moderate 21887-17084 Moderate 22290-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21887-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 22290-17084 Release Notes 21887-17084 22290-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21887-17084 22290-17084 Release Notes 4.0 2026-11-04T01:44:55 <p>Information published.</p> 1.0 2026-10-29T01:01:35 <p>Information published.</p> 3.0 2026-11-01T14:46:34 <p>Information published.</p> 2.0 2026-10-31T01:11:24 <p>Information published.</p> GNU mtools through 4.0.49 has an out-of-bounds write in parse_vses in vfat.c. Mariner mitre Yes CVE-2026-118384 Numeric Range Comparison Without Minimum Check 0-17084 0-17084 Moderate 0-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H 0-17084 Release Notes 0-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-29T01:02:52 <p>Information published.</p> OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client Mariner GitHub_M Yes CVE-2026-118669 Incorrect Authorization 22288-17084 22042-17084 22288-17084 22042-17084 Important 22288-17084 Important 22042-17084 Release Notes 22288-17084 22042-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22288-17084 22042-17084 Release Notes 2.0 2026-11-01T15:05:30 <p>Information published.</p> 1.0 2026-10-31T01:13:15 <p>Information published.</p> pyasn1: Quadratic CPU use in schemaless BER/CER/DER container decoding Mariner GitHub_M Yes CVE-2026-119194 Inefficient Algorithmic Complexity 22265-17084 22265-17084 Important 22265-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22265-17084 Release Notes 22265-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22265-17084 Release Notes 1.0 2026-11-03T01:06:46 <p>Information published.</p> pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding Mariner GitHub_M Yes CVE-2026-119195 Inefficient Algorithmic Complexity 22265-17084 22265-17084 Important 22265-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22265-17084 Release Notes 22265-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22265-17084 Release Notes 1.0 2026-10-31T01:01:40 <p>Information published.</p> pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding Mariner GitHub_M Yes CVE-2026-119196 Inefficient Algorithmic Complexity 22265-17084 22265-17084 Important 22265-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22265-17084 Release Notes 22265-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22265-17084 Release Notes 1.0 2026-10-31T01:01:45 <p>Information published.</p> pyasn1: Quadratic-complexity denial of service in binary REAL decoding Mariner GitHub_M Yes CVE-2026-119197 Inefficient Algorithmic Complexity 22265-17084 22265-17084 Important 22265-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22265-17084 Release Notes 22265-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22265-17084 Release Notes 1.0 2026-10-31T01:01:50 <p>Information published.</p> gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments Mariner GitHub_M Yes CVE-2026-119299 Out-of-bounds Read 22345-17084 22345-17084 Moderate 22345-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22345-17084 Release Notes 22345-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22345-17084 Release Notes 1.0 2026-11-05T01:04:44 <p>Information published.</p> SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander() Mariner VulnCheck Yes CVE-2026-119371 Uncontrolled Recursion 22268-17084 22268-17084 Moderate 22268-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22268-17084 Release Notes 22268-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22268-17084 Release Notes 1.0 2026-10-31T01:04:34 <p>Information published.</p> SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet() Mariner VulnCheck Yes CVE-2026-119372 Use After Free 22268-17084 22268-17084 Moderate 22268-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22268-17084 Release Notes 22268-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22268-17084 Release Notes 1.0 2026-10-31T01:04:38 <p>Information published.</p> SQLite before 3.54.0 FTS5 Heap Buffer Overflow via fts5MergeRowidLists() Mariner VulnCheck Yes CVE-2026-119373 Out-of-bounds Write 22268-17084 22268-17084 Important 22268-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 22268-17084 Release Notes 22268-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22268-17084 Release Notes 1.0 2026-10-31T01:04:44 <p>Information published.</p> SQLite before 3.54.0 Heap Buffer Overflow via FTS5 fts5DoSecureDelete() Mariner VulnCheck Yes CVE-2026-119374 Out-of-bounds Write 22268-17084 22268-17084 Important 22268-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 22268-17084 Release Notes 22268-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22268-17084 Release Notes 1.0 2026-10-31T01:04:50 <p>Information published.</p> SQLite before 3.54.0 Information Disclosure via WAL Page Size Mismatch Mariner VulnCheck Yes CVE-2026-119375 Use of Uninitialized Resource 22268-17084 22268-17084 Moderate 22268-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 22268-17084 Release Notes 22268-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22268-17084 Release Notes 1.0 2026-10-31T01:04:56 <p>Information published.</p> SQLite before 3.54.0 Stack Exhaustion via COLLATE Operator Chain Mariner VulnCheck Yes CVE-2026-119376 Uncontrolled Recursion 22268-17084 22268-17084 Moderate 22268-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22268-17084 Release Notes 22268-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22268-17084 Release Notes 1.0 2026-10-31T01:05:02 <p>Information published.</p> SQLite before 3.54.0 Use-After-Free in R-Tree nodeWrite() Mariner VulnCheck Yes CVE-2026-119378 Use After Free 19212-17084 22268-17084 19212-17084 22268-17084 Moderate 19212-17084 Moderate 22268-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 19212-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22268-17084 Release Notes 19212-17084 22268-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19212-17084 22268-17084 Release Notes 2.0 2026-11-05T01:04:05 <p>Information published.</p> 1.0 2026-10-31T01:05:09 <p>Information published.</p> Prometheus through 3.15.1 Credential Leak via remote_write Cross-Host Redirects Mariner VulnCheck Yes CVE-2026-119566 Insufficiently Protected Credentials 22345-17084 22345-17084 Moderate 22345-17084 4.8 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N 22345-17084 Release Notes 22345-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22345-17084 Release Notes 1.0 2026-11-05T01:04:36 <p>Information published.</p> vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking Mariner VulnCheck Yes CVE-2026-119568 Improper Verification of Source of a Communication Channel 22269-17084 22269-17084 Critical 22269-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 22269-17084 Release Notes 22269-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22269-17084 Release Notes 1.0 2026-10-31T01:05:37 <p>Information published.</p> SQLite CLI through 3.54.1 Command Injection via .recover Output Mariner VulnCheck Yes CVE-2026-119586 Improper Neutralization of Special Elements used in a Command 22268-17084 22268-17084 Important 22268-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 22268-17084 Release Notes 22268-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22268-17084 Release Notes 1.0 2026-10-31T01:05:21 <p>Information published.</p> SQLite before 3.54.0 Stack Exhaustion via countOfViewOptimization() in VALUES Clause Mariner VulnCheck Yes CVE-2026-119591 Uncontrolled Recursion 22268-17084 22268-17084 Moderate 22268-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22268-17084 Release Notes 22268-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22268-17084 Release Notes 1.0 2026-10-31T01:05:26 <p>Information published.</p> AFFLIB through 3.7.22 Heap Out-of-Bounds Write in af_get_page Mariner VulnCheck Yes CVE-2026-119601 Out-of-bounds Write 22273-17084 22273-17084 Moderate 22273-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H 22273-17084 Release Notes 22273-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22273-17084 Release Notes 1.0 2026-11-01T02:01:29 <p>Information published.</p> 2.0 2026-11-02T14:51:26 <p>Information published.</p> libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window Mariner VulnCheck Yes CVE-2026-119602 Use of Uninitialized Resource 21850-17084 22049-17084 21850-17084 22049-17084 Moderate 21850-17084 Moderate 22049-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21850-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 22049-17084 Release Notes 21850-17084 22049-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21850-17084 22049-17084 Release Notes 1.0 2026-11-05T01:03:52 <p>Information published.</p> NGINX ngx_http_core_module vulnerability Mariner f5 Yes CVE-2026-15176 Heap-based Buffer Overflow 22054-17084 22054-17084 Moderate 22054-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 22054-17084 Release Notes 22054-17084 Security Update 1.30.6-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22054-17084 Release Notes 1.0 2026-10-17T01:07:37 <p>Information published.</p> 3.0 2026-11-02T01:48:08 <p>Information published.</p> 2.0 2026-11-01T14:49:13 <p>Information published.</p> Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt Mariner Qt Yes CVE-2026-16762 Inefficient Algorithmic Complexity 21967-17084 22304-17084 21967-17084 22304-17084 Moderate 21967-17084 Moderate 22304-17084 Release Notes 21967-17084 22304-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21967-17084 22304-17084 Release Notes 1.0 2026-10-29T01:10:18 <p>Information published.</p> 2.0 2026-11-01T14:56:10 <p>Information published.</p> Libarchive: libarchive: use-after-free via aliased mac metadata copy Mariner redhat Yes CVE-2026-17591 Use After Free 21678-17084 21678-17084 Low 21678-17084 3.6 3.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L/E:U 21678-17084 Release Notes 21678-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21678-17084 Release Notes 1.0 2026-10-21T01:11:27 <p>Information published.</p> 2.0 2026-10-28T01:45:03 <p>Information published.</p> HDF5 scale-offset filter heap buffer over-read via crafted chunk Mariner HDFG Yes CVE-2026-19029 Out-of-bounds Read 21627-17084 22296-17084 21627-17084 22296-17084 Moderate 21627-17084 Moderate 22296-17084 Release Notes 21627-17084 22296-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21627-17084 22296-17084 Release Notes 1.0 2026-10-08T01:10:39 <p>Information published.</p> 2.0 2026-11-01T14:49:36 <p>Information published.</p> Go-getter vulnerable to a path traversal in S3/GCS directory download handling Mariner HashiCorp Yes CVE-2026-19585 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21894-17084 21894-17084 Moderate 21894-17084 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N 21894-17084 Release Notes 21894-17084 Security Update 1.9.5-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21894-17084 Release Notes 1.0 2026-10-11T02:00:30 <p>Information published.</p> 4.0 2026-10-18T01:46:50 <p>Information published.</p> 2.0 2026-10-13T02:52:16 <p>Information published.</p> 3.0 2026-10-17T14:49:35 <p>Information published.</p> Amplified resource exhaustion in inbound message processing Mariner isc Yes CVE-2026-19630 Inefficient Algorithmic Complexity 21677-17084 22331-17084 21677-17084 22331-17084 Important 21677-17084 Important 22331-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21677-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22331-17084 Release Notes 21677-17084 22331-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21677-17084 22331-17084 Release Notes 1.0 2026-10-30T01:02:22 <p>Information published.</p> 2.0 2026-11-01T14:57:52 <p>Information published.</p> StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation Mariner kubernetes Yes CVE-2026-2270 Authorization Bypass Through User-Controlled Key 21893-17084 22289-17084 21893-17084 22289-17084 Moderate 21893-17084 Moderate 22289-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N 21893-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N 22289-17084 Release Notes 21893-17084 22289-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21893-17084 22289-17084 Release Notes 1.0 2026-10-28T01:02:06 <p>Information published.</p> 2.0 2026-11-01T14:46:21 <p>Information published.</p> Apache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directories Mariner apache Yes CVE-2026-42356 Deployment of Wrong Handler 21971-17084 21971-17084 Low 21971-17084 3.7 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:12:06 <p>Information published.</p> 2.0 2026-10-10T15:03:47 <p>Information published.</p> 3.0 2026-10-13T01:56:21 <p>Information published.</p> Apache HTTP Server: mod_dav shared lock overflow Mariner apache Yes CVE-2026-42528 Memory Allocation with Excessive Size Value 21971-17084 21971-17084 Moderate 21971-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:21:20 <p>Information published.</p> 2.0 2026-10-10T15:06:40 <p>Information published.</p> 3.0 2026-10-13T01:59:03 <p>Information published.</p> In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file. Mariner mitre Yes CVE-2026-42616 Out-of-bounds Write 22012-17084 22012-17084 Important 22012-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 22012-17084 Release Notes 22012-17084 Security Update 2022.10.3-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22012-17084 Release Notes 1.0 2026-10-10T01:05:50 <p>Information published.</p> In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file. Mariner mitre Yes CVE-2026-42617 Heap-based Buffer Overflow 22012-17084 22012-17084 Important 22012-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 22012-17084 Release Notes 22012-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22012-17084 Release Notes 1.0 2026-10-10T01:06:12 <p>Information published.</p> In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file. Mariner mitre Yes CVE-2026-42618 Heap-based Buffer Overflow 22012-17084 22012-17084 Important 22012-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 22012-17084 Release Notes 22012-17084 Security Update 2022.10.3-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22012-17084 Release Notes 1.0 2026-10-10T01:06:34 <p>Information published.</p> In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file. Mariner mitre Yes CVE-2026-46569 Out-of-bounds Write 22012-17084 22012-17084 Important 22012-17084 7.7 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 22012-17084 Release Notes 22012-17084 Security Update 2022.10.3-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22012-17084 Release Notes 1.0 2026-10-10T01:06:58 <p>Information published.</p> In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading the special crafted file metadata. Mariner mitre Yes CVE-2026-46570 Heap-based Buffer Overflow 22012-17084 22012-17084 Important 22012-17084 8.1 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H 22012-17084 Release Notes 22012-17084 Security Update 2022.10.3-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22012-17084 Release Notes 1.0 2026-10-10T01:07:21 <p>Information published.</p> In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file. Mariner mitre Yes CVE-2026-46571 Out-of-bounds Read 22012-17084 22012-17084 Moderate 22012-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 22012-17084 Release Notes 22012-17084 Security Update 2022.10.3-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22012-17084 Release Notes 1.0 2026-10-10T01:07:44 <p>Information published.</p> In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a specially crafted directory. Mariner mitre Yes CVE-2026-46572 Heap-based Buffer Overflow 22012-17084 22012-17084 Important 22012-17084 7.4 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 22012-17084 Release Notes 22012-17084 Security Update 2022.10.3-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22012-17084 Release Notes 1.0 2026-10-10T01:08:07 <p>Information published.</p> 2.0 2026-10-28T01:45:02 <p>Information published.</p> Apache HTTP Server: mod_heartmonitor denial of service Mariner apache Yes CVE-2026-46729 NULL Pointer Dereference 21971-17084 21971-17084 Important 21971-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:27:53 <p>Information published.</p> 2.0 2026-10-10T15:08:46 <p>Information published.</p> 3.0 2026-10-13T02:01:00 <p>Information published.</p> Apache HTTP Server: mod_session: Session cookie not removed during internal redirect Mariner apache Yes CVE-2026-47360 Exposure of Sensitive Information to an Unauthorized Actor 21971-17084 21971-17084 Important 21971-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:18:37 <p>Information published.</p> 2.0 2026-10-10T15:05:52 <p>Information published.</p> 3.0 2026-10-13T01:58:19 <p>Information published.</p> Apache HTTP Server: mod_auth_digest reauthentication attack Mariner apache Yes CVE-2026-48005 Missing Authentication for Critical Function 21971-17084 21971-17084 Moderate 21971-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:20:01 <p>Information published.</p> 2.0 2026-10-10T15:06:16 <p>Information published.</p> 3.0 2026-10-13T01:58:41 <p>Information published.</p> OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation Mariner GitHub_M Yes CVE-2026-49264 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 22042-17084 22288-17084 22042-17084 22288-17084 Moderate 22042-17084 Moderate 22288-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22042-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22288-17084 Release Notes 22042-17084 22288-17084 Security Update 3.2.2-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22042-17084 22288-17084 Release Notes 1.0 2026-10-15T01:10:11 <p>Information published.</p> 3.0 2026-11-01T14:45:57 <p>Information published.</p> 2.0 2026-10-24T14:48:06 <p>Information published.</p> OAuthLib: Timing Attack Vulnerability in PKCE code_verifier Comparison Mariner GitHub_M Yes CVE-2026-49265 Observable Timing Discrepancy 22042-17084 22288-17084 22042-17084 22288-17084 Moderate 22042-17084 Moderate 22288-17084 6.8 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N 22042-17084 6.8 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N 22288-17084 Release Notes 22042-17084 22288-17084 Security Update 3.2.2-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22042-17084 22288-17084 Release Notes 1.0 2026-10-15T01:10:34 <p>Information published.</p> 3.0 2026-11-01T14:46:05 <p>Information published.</p> 2.0 2026-10-24T14:48:10 <p>Information published.</p> util-linux mount hook_owner TOCTOU allows local privilege escalation Mariner GitHub_M Yes CVE-2026-53612 Time-of-check Time-of-use (TOCTOU) Race Condition 22045-17084 22045-17084 Moderate 22045-17084 7.0 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22045-17084 Release Notes 22045-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22045-17084 Release Notes 1.0 2026-10-17T01:08:44 <p>Information published.</p> util-linux mount target TOCTOU allows local privilege escalation Mariner GitHub_M Yes CVE-2026-53613 Time-of-check Time-of-use (TOCTOU) Race Condition 22045-17084 22045-17084 Important 22045-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 22045-17084 Release Notes 22045-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22045-17084 Release Notes 1.0 2026-10-17T01:08:38 <p>Information published.</p> util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass Mariner GitHub_M Yes CVE-2026-53614 Improper Privilege Management 22045-17084 22045-17084 Moderate 22045-17084 7.0 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22045-17084 Release Notes 22045-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22045-17084 Release Notes 1.0 2026-10-22T01:01:36 <p>Information published.</p> util-linux libblkid DOS extended-partition overflow produces invalid partition metadata Mariner GitHub_M Yes CVE-2026-53615 Integer Overflow or Wraparound 22045-17084 22045-17084 Important 22045-17084 8.0 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H 22045-17084 Release Notes 22045-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22045-17084 Release Notes 1.0 2026-10-16T01:06:10 <p>Information published.</p> CUPS ipp backend status-line injection can update queue PPD and lead to conditional RCE as lp via foomatic-rip Mariner GitHub_M Yes CVE-2026-55453 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') 21869-17084 22280-17084 21869-17084 22280-17084 Low 21869-17084 Low 22280-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L 21869-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L 22280-17084 Release Notes 21869-17084 22280-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21869-17084 22280-17084 Release Notes 1.0 2026-10-17T01:01:47 <p>Information published.</p> 2.0 2026-11-01T14:48:42 <p>Information published.</p> CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix) Mariner GitHub_M Yes CVE-2026-55467 Improper Neutralization of CRLF Sequences ('CRLF Injection') 21869-17084 22280-17084 21869-17084 22280-17084 Low 21869-17084 Low 22280-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21869-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 22280-17084 Release Notes 21869-17084 22280-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21869-17084 22280-17084 Release Notes 1.0 2026-10-17T01:01:30 <p>Information published.</p> 2.0 2026-11-01T14:48:27 <p>Information published.</p> CUPS copy_model() creates a predictable PPD tempfile without O_EXCL/O_NOFOLLOW (symlink TOCTOU, lp → root) Mariner GitHub_M Yes CVE-2026-55480 Improper Link Resolution Before File Access ('Link Following') 21869-17084 22280-17084 21869-17084 22280-17084 Moderate 21869-17084 Moderate 22280-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21869-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 22280-17084 Release Notes 21869-17084 22280-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21869-17084 22280-17084 Release Notes 1.0 2026-10-17T01:01:41 <p>Information published.</p> 2.0 2026-11-01T14:48:37 <p>Information published.</p> Apache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_char Mariner apache Yes CVE-2026-56153 Out-of-bounds Write 21971-17084 21971-17084 Important 21971-17084 9.4 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:10:46 <p>Information published.</p> 2.0 2026-10-10T15:03:21 <p>Information published.</p> 3.0 2026-10-13T01:55:54 <p>Information published.</p> Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...} Mariner apache Yes CVE-2026-56154 Use After Free 21971-17084 21971-17084 Critical 21971-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:17:18 <p>Information published.</p> 2.0 2026-10-10T15:05:27 <p>Information published.</p> 3.0 2026-10-13T01:57:56 <p>Information published.</p> Apache HTTP Server: mod_proxy_html: crash in dump_content Mariner apache Yes CVE-2026-56449 Out-of-bounds Write 21971-17084 21971-17084 Moderate 21971-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:30:32 <p>Information published.</p> 2.0 2026-10-10T15:09:36 <p>Information published.</p> 3.0 2026-10-13T02:01:48 <p>Information published.</p> 4.0 2026-10-22T01:10:01 <p>Information published.</p> Panic parsing crafted input in x/text/secure/precis in golang.org/x/text Mariner Go Yes CVE-2026-56851 Out-of-bounds Write 21904-17084 21904-17084 Important 21904-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21904-17084 Release Notes 21904-17084 Security Update 2.14.1-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21904-17084 Release Notes 1.0 2026-10-11T01:59:48 <p>Information published.</p> 3.0 2026-10-16T01:51:27 <p>Information published.</p> 2.0 2026-10-13T02:51:33 <p>Information published.</p> 4.0 2026-10-22T01:10:36 <p>Information published.</p> HTTP/1 client connection desynchronization after CONNECT rejection in net/http Mariner Go Yes CVE-2026-56866 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 21857-17084 21809-17084 22292-17084 22293-17084 21857-17084 21809-17084 22292-17084 22293-17084 Important 21857-17084 Important 21809-17084 Important 22292-17084 Important 22293-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21857-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21809-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 22292-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 22293-17084 Release Notes 21857-17084 21809-17084 22292-17084 22293-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 21809-17084 22292-17084 22293-17084 Release Notes 1.0 2026-10-11T01:52:11 <p>Information published.</p> 3.0 2026-10-12T15:35:53 <p>Information published.</p> 4.0 2026-10-16T01:51:13 <p>Information published.</p> 2.0 2026-10-12T02:17:39 <p>Information published.</p> 5.0 2026-10-22T01:12:01 <p>Information published.</p> 6.0 2026-11-01T14:52:12 <p>Information published.</p> Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy Mariner apache Yes CVE-2026-57941 Use After Free 21971-17084 21971-17084 Critical 21971-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-07T01:31:34 <p>Information published.</p> 3.0 2026-10-13T02:34:32 <p>Information published.</p> 2.0 2026-10-10T14:44:22 <p>Information published.</p> 4.0 2026-10-22T01:13:42 <p>Information published.</p> Apache HTTP Server: mod_dav_fs property database read access Mariner apache Yes CVE-2026-58415 Files or Directories Accessible to External Parties 21971-17084 21971-17084 Moderate 21971-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:29:08 <p>Information published.</p> 2.0 2026-10-10T15:09:11 <p>Information published.</p> 3.0 2026-10-13T02:01:23 <p>Information published.</p> Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM Mariner apache Yes CVE-2026-59685 Out-of-bounds Write 21971-17084 21971-17084 Important 21971-17084 8.2 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-07T01:32:22 <p>Information published.</p> 3.0 2026-10-13T02:35:16 <p>Information published.</p> 2.0 2026-10-10T14:46:12 <p>Information published.</p> Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function Mariner apache Yes CVE-2026-59797 Improper Privilege Management 21971-17084 21971-17084 Critical 21971-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:25:21 <p>Information published.</p> 2.0 2026-10-10T15:07:55 <p>Information published.</p> 3.0 2026-10-13T02:00:11 <p>Information published.</p> Squid Request Smuggling in HTTP Transfer-Encoding Mariner GitHub_M Yes CVE-2026-61642 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 21713-17084 21713-17084 Important 21713-17084 7.7 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N 21713-17084 Release Notes 21713-17084 Security Update 6.13-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21713-17084 Release Notes 2.0 2026-10-24T01:46:54 <p>Information published.</p> 1.0 2026-10-17T01:08:32 <p>Information published.</p> OpenPrinting CUPS: root-side banner file disclosure Mariner GitHub_M Yes CVE-2026-61702 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21869-17084 22280-17084 21869-17084 22280-17084 Moderate 21869-17084 Moderate 22280-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21869-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 22280-17084 Release Notes 21869-17084 22280-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21869-17084 22280-17084 Release Notes 1.0 2026-10-17T01:01:36 <p>Information published.</p> 2.0 2026-11-01T14:48:31 <p>Information published.</p> github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files Mariner GitHub_M Yes CVE-2026-61801 Uncontrolled Resource Consumption 21908-17084 21901-17084 21911-17084 21915-17084 21916-17084 21893-17084 21902-17084 21807-17084 22024-17084 21929-17084 21903-17084 22283-17084 22285-17084 22289-17084 22328-17084 21908-17084 21901-17084 21911-17084 21915-17084 21916-17084 21893-17084 21902-17084 21807-17084 22024-17084 21929-17084 21903-17084 22283-17084 22285-17084 22289-17084 22328-17084 Moderate 21908-17084 Moderate 21901-17084 Moderate 21911-17084 Moderate 21915-17084 Moderate 21916-17084 Moderate 21893-17084 Moderate 21902-17084 Moderate 21807-17084 Moderate 22024-17084 Moderate 21929-17084 Moderate 21903-17084 Moderate 22283-17084 Moderate 22285-17084 Moderate 22289-17084 Moderate 22328-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21908-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21901-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21911-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21915-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21916-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21893-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21902-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21807-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22024-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21929-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21903-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22283-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22285-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22289-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22328-17084 Release Notes 21908-17084 Security Update 2.3.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21908-17084 Release Notes Release Notes 21901-17084 Security Update 1.62.0-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21901-17084 Release Notes Release Notes 21911-17084 Security Update 2.27.0-16 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21911-17084 Release Notes Release Notes 21915-17084 22283-17084 Security Update 4.1.0.kata1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21915-17084 22283-17084 Release Notes Release Notes 21916-17084 22285-17084 Security Update 3.15.0.aks0-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21916-17084 22285-17084 Release Notes Release Notes 21893-17084 22289-17084 Security Update 1.30.10-32 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21893-17084 22289-17084 Release Notes Release Notes 21902-17084 Security Update 1.8.4-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21902-17084 Release Notes Release Notes 21807-17084 Security Update 25.0.18-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 Release Notes Release Notes 22024-17084 22328-17084 Security Update 1.4.3-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22024-17084 22328-17084 Release Notes Release Notes 21929-17084 Security Update 1.14.4-14 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21929-17084 Release Notes Release Notes 21903-17084 Security Update 1.31.0-35 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21903-17084 Release Notes 1.0 2026-10-11T01:50:24 <p>Information published.</p> 8.0 2026-10-18T01:46:45 <p>Information published.</p> 9.0 2026-10-21T01:43:48 <p>Information published.</p> 5.0 2026-10-16T01:51:07 <p>Information published.</p> 2.0 2026-10-12T02:17:00 <p>Information published.</p> 3.0 2026-10-13T02:43:41 <p>Information published.</p> 4.0 2026-10-14T15:17:09 <p>Information published.</p> 6.0 2026-10-17T01:48:25 <p>Information published.</p> 7.0 2026-10-17T14:48:46 <p>Information published.</p> 12.0 2026-11-02T01:46:01 <p>Information published.</p> 10.0 2026-10-31T14:45:09 <p>Information published.</p> 11.0 2026-11-01T14:56:07 <p>Information published.</p> Apache HTTP Server: mod_proxy_ftp PASV address handling Mariner apache Yes CVE-2026-63045 Improper Access Control 21971-17084 21971-17084 Important 21971-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:23:52 <p>Information published.</p> 2.0 2026-10-10T15:07:30 <p>Information published.</p> 3.0 2026-10-13T01:59:48 <p>Information published.</p> Apache HTTP Server: mod_vhost_alias stack overflow Mariner apache Yes CVE-2026-63292 Stack-based Buffer Overflow 21971-17084 21971-17084 Moderate 21971-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-07T01:31:57 <p>Information published.</p> 3.0 2026-10-13T02:34:54 <p>Information published.</p> 2.0 2026-10-10T14:44:51 <p>Information published.</p> Apache HTTP Server: mod_xml2enc crash on charset conversion failure Mariner apache Yes CVE-2026-63686 NULL Pointer Dereference 21971-17084 21971-17084 Important 21971-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:13:19 <p>Information published.</p> 2.0 2026-10-10T15:04:12 <p>Information published.</p> 3.0 2026-10-13T01:56:44 <p>Information published.</p> Apache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smuggling Mariner apache Yes CVE-2026-63718 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 21971-17084 21971-17084 Important 21971-17084 8.2 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-15T01:12:42 <p>Information published.</p> 3.0 2026-11-02T01:47:18 <p>Information published.</p> 2.0 2026-11-01T14:46:15 <p>Information published.</p> Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count Mariner apache Yes CVE-2026-63772 Allocation of Resources Without Limits or Throttling 21916-17084 21903-17084 21966-17084 21972-17084 22285-17084 21916-17084 21903-17084 21966-17084 21972-17084 22285-17084 Important 21916-17084 Important 21903-17084 Important 21966-17084 Important 21972-17084 Important 22285-17084 Release Notes 21916-17084 22285-17084 Security Update 3.15.0.aks0-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21916-17084 22285-17084 Release Notes Release Notes 21903-17084 Security Update 1.31.0-34 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21903-17084 Release Notes Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes Release Notes 21972-17084 Security Update 19.0.4-15 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21972-17084 Release Notes 5.0 2026-10-16T01:50:23 <p>Information published.</p> 1.0 2026-10-07T01:36:45 <p>Information published.</p> 3.0 2026-10-13T02:35:54 <p>Information published.</p> 2.0 2026-10-10T14:47:04 <p>Information published.</p> 4.0 2026-10-14T15:06:08 <p>Information published.</p> 8.0 2026-11-02T01:45:42 <p>Information published.</p> 6.0 2026-10-31T14:44:39 <p>Information published.</p> 7.0 2026-11-01T14:49:25 <p>Information published.</p> Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose Mariner EEF Yes CVE-2026-65626 Observable Discrepancy 22325-17084 22325-17084 Moderate 22325-17084 Release Notes 22325-17084 Security Update 3.13.7-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22325-17084 Release Notes 4.0 2026-11-04T01:44:43 <p>Information published.</p> 3.0 2026-11-03T01:47:56 <p>Information published.</p> 2.0 2026-11-01T14:56:04 <p>Information published.</p> 1.0 2026-10-31T01:14:14 <p>Information published.</p> Weak PBKDF2 parameters for password-encrypted private-key export in jose Mariner EEF Yes CVE-2026-65629 Use of Password Hash With Insufficient Computational Effort 21829-17084 21829-17084 Moderate 21829-17084 Release Notes 21829-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21829-17084 Release Notes 3.0 2026-11-04T01:44:37 <p>Information published.</p> 2.0 2026-11-01T15:05:53 <p>Information published.</p> 1.0 2026-10-31T01:14:09 <p>Information published.</p> erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service Mariner EEF Yes CVE-2026-65631 Inefficient Algorithmic Complexity 22325-17084 22325-17084 Moderate 22325-17084 Release Notes 22325-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22325-17084 Release Notes 3.0 2026-11-03T01:48:05 <p>Information published.</p> 2.0 2026-11-01T14:56:09 <p>Information published.</p> 1.0 2026-10-31T01:14:20 <p>Information published.</p> ECDSA signature length is not validated in jose, allowing signature malleability Mariner EEF Yes CVE-2026-65632 Improper Verification of Cryptographic Signature 22325-17084 22325-17084 Moderate 22325-17084 Release Notes 22325-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22325-17084 Release Notes 3.0 2026-11-03T01:47:52 <p>Information published.</p> 2.0 2026-11-01T14:54:54 <p>Information published.</p> 1.0 2026-10-31T01:14:11 <p>Information published.</p> Apache Thrift: C++ THeaderTransport does not enforce configured maxFrameSize Mariner apache Yes CVE-2026-66054 Allocation of Resources Without Limits or Throttling 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 3.0 2026-10-10T15:29:37 <p>Information published.</p> 2.0 2026-10-05T15:24:04 <p>Information published.</p> 4.0 2026-10-13T02:31:48 <p>Information published.</p> 1.0 2026-10-04T01:02:37 <p>Information published.</p> Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language) Mariner apache Yes CVE-2026-66055 Allocation of Resources Without Limits or Throttling 21903-17084 21966-17084 21903-17084 21966-17084 Important 21903-17084 Important 21966-17084 Release Notes 21903-17084 Security Update 1.31.0-34 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21903-17084 Release Notes Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 4.0 2026-10-10T15:29:15 <p>Information published.</p> 6.0 2026-10-16T01:50:34 <p>Information published.</p> 3.0 2026-10-07T01:39:20 <p>Information published.</p> 2.0 2026-10-05T15:23:42 <p>Information published.</p> 5.0 2026-10-13T02:30:41 <p>Information published.</p> 1.0 2026-10-04T01:02:21 <p>Information published.</p> Apache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messages Mariner apache Yes CVE-2026-66081 Access of Uninitialized Pointer 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 1.0 2026-10-07T01:41:24 <p>Information published.</p> 3.0 2026-10-13T02:39:03 <p>Information published.</p> 2.0 2026-10-10T14:50:34 <p>Information published.</p> Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize Mariner apache Yes CVE-2026-66331 Allocation of Resources Without Limits or Throttling 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 1.0 2026-10-07T01:44:04 <p>Information published.</p> 2.0 2026-10-10T14:53:08 <p>Information published.</p> 3.0 2026-10-13T01:45:12 <p>Information published.</p> Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length Mariner apache Yes CVE-2026-66837 Stack-based Buffer Overflow 21966-17084 21966-17084 Important 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 1.0 2026-10-07T01:05:11 <p>Information published.</p> 2.0 2026-10-10T15:01:46 <p>Information published.</p> 3.0 2026-10-13T01:54:09 <p>Information published.</p> Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml) Mariner apache Yes CVE-2026-66858 Uncontrolled Recursion 21966-17084 21966-17084 Important 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 2.0 2026-10-05T15:25:33 <p>Information published.</p> 4.0 2026-10-13T02:33:44 <p>Information published.</p> 3.0 2026-10-10T14:43:25 <p>Information published.</p> 1.0 2026-10-04T01:03:39 <p>Information published.</p> Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route Mariner apache Yes CVE-2026-66859 NULL Pointer Dereference 21966-17084 21966-17084 Important 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 1.0 2026-10-07T01:46:57 <p>Information published.</p> 2.0 2026-10-10T14:54:50 <p>Information published.</p> 3.0 2026-10-13T01:47:52 <p>Information published.</p> RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers Mariner GitHub_M Yes CVE-2026-67418 Improper Validation of Syntactic Correctness of Input 21829-17084 21829-17084 Moderate 21829-17084 Release Notes 21829-17084 Security Update 3.13.7-11 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21829-17084 Release Notes 2.0 2026-10-24T01:46:49 <p>Information published.</p> 1.0 2026-10-17T01:08:26 <p>Information published.</p> 3.0 2026-10-25T01:47:07 <p>Information published.</p> An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU) and Extended Key Usage (EKU) Mariner mitre Yes CVE-2026-67693 Time-of-check Time-of-use (TOCTOU) Race Condition 22025-17084 22025-17084 Important 22025-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 22025-17084 Release Notes 22025-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22025-17084 Release Notes 1.0 2026-10-11T01:53:44 <p>Information published.</p> 2.0 2026-10-12T15:36:53 <p>Information published.</p> Apache HTTP Server: mod_auth_digest one-time-nonce replay attack Mariner apache Yes CVE-2026-73636 Authentication Bypass by Capture-replay 21971-17084 21971-17084 Important 21971-17084 8.1 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:15:09 <p>Information published.</p> 2.0 2026-10-10T15:04:36 <p>Information published.</p> 3.0 2026-10-13T01:57:09 <p>Information published.</p> Apache HTTP Server: mod_auth_digest DoS attack Mariner apache Yes CVE-2026-73637 Use After Free 21971-17084 21971-17084 Moderate 21971-17084 7.3 6.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:26:33 <p>Information published.</p> 2.0 2026-10-10T15:08:21 <p>Information published.</p> 3.0 2026-10-13T02:00:33 <p>Information published.</p> Heap Buffer Overflow in GNU Aspell's prezip utility Mariner CERT-PL Yes CVE-2026-75818 Heap-based Buffer Overflow 21970-17084 22277-17084 21970-17084 22277-17084 Low 21970-17084 Low 22277-17084 Release Notes 21970-17084 22277-17084 Security Update 0.60.8.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21970-17084 22277-17084 Release Notes 2.0 2026-10-24T01:45:26 <p>Information published.</p> 1.0 2026-10-07T01:03:26 <p>Information published.</p> 3.0 2026-11-01T14:44:55 <p>Information published.</p> Out-of-bounds Read in GNU Aspell Mariner CERT-PL Yes CVE-2026-75819 Out-of-bounds Read 21970-17084 22277-17084 21970-17084 22277-17084 Low 21970-17084 Low 22277-17084 Release Notes 21970-17084 22277-17084 Security Update 0.60.8.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21970-17084 22277-17084 Release Notes 2.0 2026-10-24T01:45:31 <p>Information published.</p> 1.0 2026-10-07T01:03:55 <p>Information published.</p> 3.0 2026-11-01T14:45:00 <p>Information published.</p> Integer Truncation Leading to Heap Corruption in GNU Aspell Mariner CERT-PL Yes CVE-2026-75820 Integer Overflow or Wraparound 21970-17084 22277-17084 21970-17084 22277-17084 Low 21970-17084 Low 22277-17084 Release Notes 21970-17084 22277-17084 Security Update 0.60.8.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21970-17084 22277-17084 Release Notes 2.0 2026-10-24T01:45:22 <p>Information published.</p> 1.0 2026-10-07T01:02:57 <p>Information published.</p> 3.0 2026-11-01T14:56:06 <p>Information published.</p> Null Pointer Dereference in PKCS#7 bundle with no certificates Mariner libreswan Yes CVE-2026-77207 NULL Pointer Dereference 22041-17084 22041-17084 Important 22041-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22041-17084 Release Notes 22041-17084 Security Update 4.15-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22041-17084 Release Notes 1.0 2026-10-15T01:08:58 <p>Information published.</p> 3.0 2026-10-30T01:44:01 <p>Information published.</p> 2.0 2026-10-28T14:43:26 <p>Information published.</p> libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer Mariner VulnCheck Yes CVE-2026-77214 Out-of-bounds Read 21887-17084 21887-17084 Important 21887-17084 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L 21887-17084 Release Notes 21887-17084 Security Update 2.9.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21887-17084 Release Notes 3.0 2026-10-11T01:04:18 <p>Information published.</p> 6.0 2026-10-16T01:50:54 <p>Information published.</p> 1.0 2026-10-09T01:02:19 <p>Information published.</p> 2.0 2026-10-10T15:02:55 <p>Information published.</p> 4.0 2026-10-12T02:15:33 <p>Information published.</p> 5.0 2026-10-13T01:55:23 <p>Information published.</p> KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication Mariner GitHub_M Yes CVE-2026-77524 Improper Privilege Management 21904-17084 21904-17084 Critical 21904-17084 9.9 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 21904-17084 Release Notes 21904-17084 Security Update 2.14.1-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21904-17084 Release Notes 1.0 2026-10-16T01:02:57 <p>Information published.</p> 2.0 2026-10-24T01:46:36 <p>Information published.</p> HTTP/2 server memory exhaustion due to Trailer headers in net/http Mariner Go Yes CVE-2026-78659 Asymmetric Resource Consumption (Amplification) 22015-17084 21923-17084 21925-17084 21926-17084 21908-17084 21901-17084 21921-17084 21910-17084 21911-17084 21771-17084 21912-17084 22017-17084 22018-17084 21899-17084 22019-17084 21915-17084 21916-17084 21904-17084 21927-17084 21893-17084 21902-17084 22020-17084 21913-17084 21807-17084 21928-17084 21772-17084 21894-17084 21914-17084 22021-17084 22022-17084 21929-17084 21903-17084 21972-17084 21857-17084 21809-17084 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22292-17084 22293-17084 22266-17084 22015-17084 21923-17084 21925-17084 21926-17084 21908-17084 21901-17084 21921-17084 21910-17084 21911-17084 21771-17084 21912-17084 22017-17084 22018-17084 21899-17084 22019-17084 21915-17084 21916-17084 21904-17084 21927-17084 21893-17084 21902-17084 22020-17084 21913-17084 21807-17084 21928-17084 21772-17084 21894-17084 21914-17084 22021-17084 22022-17084 21929-17084 21903-17084 21972-17084 21857-17084 21809-17084 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22292-17084 22293-17084 22266-17084 Moderate 22015-17084 Moderate 21923-17084 Moderate 21925-17084 Moderate 21926-17084 Moderate 21908-17084 Moderate 21901-17084 Moderate 21921-17084 Moderate 21910-17084 Moderate 21911-17084 Moderate 21771-17084 Moderate 21912-17084 Moderate 22017-17084 Moderate 22018-17084 Moderate 21899-17084 Moderate 22019-17084 Moderate 21915-17084 Moderate 21916-17084 Moderate 21904-17084 Moderate 21927-17084 Moderate 21893-17084 Moderate 21902-17084 Moderate 22020-17084 Moderate 21913-17084 Moderate 21807-17084 Moderate 21928-17084 Moderate 21772-17084 Moderate 21894-17084 Moderate 21914-17084 Moderate 22021-17084 Moderate 22022-17084 Moderate 21929-17084 Moderate 21903-17084 Moderate 21972-17084 Important 21857-17084 Important 21809-17084 Moderate 22283-17084 Moderate 22285-17084 Moderate 22289-17084 Moderate 22281-17084 Moderate 22055-17084 Important 22292-17084 Important 22293-17084 Important 22266-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22015-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21923-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21925-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21926-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21908-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21901-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21921-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21910-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21911-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21771-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21912-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22017-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22018-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21899-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22019-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21915-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21916-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21904-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21927-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21893-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21902-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22020-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21913-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21807-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21928-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21772-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21894-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21914-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22021-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22022-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21929-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21903-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21972-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21857-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21809-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22283-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22285-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22289-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22281-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22055-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22292-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22293-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22266-17084 Release Notes 22015-17084 Security Update 1.7.7-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22015-17084 Release Notes Release Notes 21923-17084 Security Update 1.7.0-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21923-17084 Release Notes Release Notes 21925-17084 Security Update 1.12.15-15 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21925-17084 Release Notes Release Notes 21926-17084 Security Update 0.5.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21926-17084 Release Notes Release Notes 21908-17084 Security Update 2.3.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21908-17084 Release Notes Release Notes 21901-17084 Security Update 1.62.0-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21901-17084 Release Notes Release Notes 21921-17084 Security Update 1.11.4-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21921-17084 Release Notes Release Notes 21910-17084 Security Update 0.14.0-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21910-17084 Release Notes Release Notes 21911-17084 Security Update 2.27.0-16 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21911-17084 Release Notes Release Notes 21771-17084 Security Update 3.5.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21771-17084 Release Notes Release Notes 21912-17084 Security Update 0.24.2-34 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21912-17084 Release Notes Release Notes 22017-17084 Security Update 2.102.0-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22017-17084 Release Notes Release Notes 22018-17084 Security Update 3.6.1-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22018-17084 Release Notes Release Notes 21899-17084 Security Update 2.7.5-22 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21899-17084 Release Notes Release Notes 22019-17084 Security Update 3.10.182-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22019-17084 Release Notes Release Notes 21915-17084 22283-17084 Security Update 4.1.0.kata1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21915-17084 22283-17084 Release Notes Release Notes 21916-17084 22285-17084 Security Update 3.15.0.aks0-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21916-17084 22285-17084 Release Notes Release Notes 21904-17084 Security Update 2.14.1-22 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21904-17084 Release Notes Release Notes 21927-17084 Security Update 0.0.10-11 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21927-17084 Release Notes Release Notes 21893-17084 22289-17084 Security Update 1.30.10-32 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21893-17084 22289-17084 Release Notes Release Notes 21902-17084 Security Update 1.8.4-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21902-17084 Release Notes Release Notes 22020-17084 Security Update 1.15.0-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22020-17084 Release Notes Release Notes 21913-17084 22281-17084 Security Update 1.7.7-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21913-17084 22281-17084 Release Notes Release Notes 21807-17084 21857-17084 21809-17084 22055-17084 22292-17084 22293-17084 22266-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 21857-17084 21809-17084 22055-17084 22292-17084 22293-17084 22266-17084 Release Notes Release Notes 21928-17084 Security Update 4.0.2-12 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21928-17084 Release Notes Release Notes 21772-17084 Security Update 0.63.0-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21772-17084 Release Notes Release Notes 21894-17084 Security Update 1.9.5-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21894-17084 Release Notes Release Notes 21914-17084 Security Update 0.12.0-12 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21914-17084 Release Notes Release Notes 22021-17084 Security Update 1.7.0-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22021-17084 Release Notes Release Notes 22022-17084 Security Update 0.8.2-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22022-17084 Release Notes Release Notes 21929-17084 Security Update 1.14.4-14 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21929-17084 Release Notes Release Notes 21903-17084 Security Update 1.31.0-35 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21903-17084 Release Notes Release Notes 21972-17084 Security Update 19.0.4-15 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21972-17084 Release Notes 1.0 2026-10-11T01:23:14 <p>Information published.</p> 3.0 2026-10-12T15:43:37 <p>Information published.</p> 6.0 2026-10-16T01:07:09 <p>Information published.</p> 11.0 2026-10-18T01:45:50 <p>Information published.</p> 14.0 2026-10-24T01:45:46 <p>Information published.</p> 13.0 2026-10-21T01:43:43 <p>Information published.</p> 8.0 2026-10-17T01:04:57 <p>Information published.</p> 7.0 2026-10-16T01:50:53 <p>Information published.</p> 2.0 2026-10-12T02:19:01 <p>Information published.</p> 4.0 2026-10-13T02:13:26 <p>Information published.</p> 5.0 2026-10-14T15:20:27 <p>Information published.</p> 9.0 2026-10-17T01:45:31 <p>Information published.</p> 10.0 2026-10-17T14:46:31 <p>Information published.</p> 12.0 2026-10-18T14:43:24 <p>Information published.</p> 21.0 2026-11-02T01:46:57 <p>Information published.</p> 16.0 2026-10-25T01:45:44 <p>Information published.</p> 17.0 2026-10-28T01:45:34 <p>Information published.</p> 15.0 2026-10-24T14:47:48 <p>Information published.</p> 19.0 2026-10-31T14:46:17 <p>Information published.</p> 20.0 2026-11-01T15:00:05 <p>Information published.</p> 18.0 2026-10-31T01:03:34 <p>Information published.</p> HTTP/2 transport accepts malformed framing-related headers in net/http Mariner Go Yes CVE-2026-78660 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 22015-17084 22016-17084 21923-17084 21925-17084 21907-17084 21926-17084 21908-17084 21901-17084 21921-17084 21909-17084 21910-17084 21911-17084 21771-17084 21912-17084 22017-17084 22018-17084 21796-17084 22019-17084 21915-17084 21916-17084 21904-17084 21927-17084 21893-17084 21902-17084 22020-17084 21913-17084 21807-17084 21928-17084 21772-17084 21894-17084 21914-17084 22021-17084 22022-17084 21929-17084 22023-17084 21903-17084 21972-17084 21857-17084 21809-17084 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22292-17084 22293-17084 22266-17084 22015-17084 22016-17084 21923-17084 21925-17084 21907-17084 21926-17084 21908-17084 21901-17084 21921-17084 21909-17084 21910-17084 21911-17084 21771-17084 21912-17084 22017-17084 22018-17084 21796-17084 22019-17084 21915-17084 21916-17084 21904-17084 21927-17084 21893-17084 21902-17084 22020-17084 21913-17084 21807-17084 21928-17084 21772-17084 21894-17084 21914-17084 22021-17084 22022-17084 21929-17084 22023-17084 21903-17084 21972-17084 21857-17084 21809-17084 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22292-17084 22293-17084 22266-17084 Important 22015-17084 Important 22016-17084 Important 21923-17084 Important 21925-17084 Important 21907-17084 Important 21926-17084 Important 21908-17084 Important 21901-17084 Important 21921-17084 Important 21909-17084 Important 21910-17084 Important 21911-17084 Important 21771-17084 Important 21912-17084 Important 22017-17084 Important 22018-17084 Important 21796-17084 Important 22019-17084 Important 21915-17084 Important 21916-17084 Important 21904-17084 Important 21927-17084 Important 21893-17084 Important 21902-17084 Important 22020-17084 Important 21913-17084 Important 21807-17084 Important 21928-17084 Important 21772-17084 Important 21894-17084 Important 21914-17084 Important 22021-17084 Important 22022-17084 Important 21929-17084 Important 22023-17084 Important 21903-17084 Important 21972-17084 Important 21857-17084 Important 21809-17084 Important 22283-17084 Important 22285-17084 Important 22289-17084 Important 22281-17084 Important 22055-17084 Important 22292-17084 Important 22293-17084 Important 22266-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22015-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22016-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21923-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21925-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21907-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21926-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21908-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21901-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21921-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21909-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21910-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21911-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21771-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21912-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22017-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22018-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21796-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22019-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21915-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21916-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21904-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21927-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21893-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21902-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22020-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21913-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21807-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21928-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21772-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21894-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21914-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22021-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22022-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21929-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22023-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21903-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21972-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21857-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 21809-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22283-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22285-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22289-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22281-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22055-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22292-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22293-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 22266-17084 Release Notes 22015-17084 Security Update 1.7.7-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22015-17084 Release Notes Release Notes 22016-17084 Security Update 10.25.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22016-17084 Release Notes Release Notes 21923-17084 Security Update 1.7.0-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21923-17084 Release Notes Release Notes 21925-17084 Security Update 1.12.15-15 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21925-17084 Release Notes Release Notes 21907-17084 Security Update 8.7.11-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21907-17084 Release Notes Release Notes 21926-17084 Security Update 0.5.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21926-17084 Release Notes Release Notes 21908-17084 Security Update 2.3.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21908-17084 Release Notes Release Notes 21901-17084 Security Update 1.62.0-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21901-17084 Release Notes Release Notes 21921-17084 Security Update 1.11.4-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21921-17084 Release Notes Release Notes 21909-17084 Security Update 1.32.0-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21909-17084 Release Notes Release Notes 21910-17084 Security Update 0.14.0-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21910-17084 Release Notes Release Notes 21911-17084 Security Update 2.27.0-16 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21911-17084 Release Notes Release Notes 21771-17084 Security Update 3.5.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21771-17084 Release Notes Release Notes 21912-17084 Security Update 0.24.2-34 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21912-17084 Release Notes Release Notes 22017-17084 Security Update 2.102.0-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22017-17084 Release Notes Release Notes 22018-17084 Security Update 3.6.1-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22018-17084 Release Notes Release Notes 21796-17084 Security Update 2.22.0-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21796-17084 Release Notes Release Notes 22019-17084 Security Update 3.10.182-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22019-17084 Release Notes Release Notes 21915-17084 22283-17084 Security Update 4.1.0.kata1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21915-17084 22283-17084 Release Notes Release Notes 21916-17084 22285-17084 Security Update 3.15.0.aks0-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21916-17084 22285-17084 Release Notes Release Notes 21904-17084 Security Update 2.14.1-22 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21904-17084 Release Notes Release Notes 21927-17084 Security Update 0.0.10-11 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21927-17084 Release Notes Release Notes 21893-17084 22289-17084 Security Update 1.30.10-32 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21893-17084 22289-17084 Release Notes Release Notes 21902-17084 Security Update 1.8.4-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21902-17084 Release Notes Release Notes 22020-17084 Security Update 1.15.0-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22020-17084 Release Notes Release Notes 21913-17084 22281-17084 Security Update 1.7.7-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21913-17084 22281-17084 Release Notes Release Notes 21807-17084 21857-17084 21809-17084 22055-17084 22292-17084 22293-17084 22266-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 21857-17084 21809-17084 22055-17084 22292-17084 22293-17084 22266-17084 Release Notes Release Notes 21928-17084 Security Update 4.0.2-12 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21928-17084 Release Notes Release Notes 21772-17084 Security Update 0.63.0-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21772-17084 Release Notes Release Notes 21894-17084 Security Update 1.9.5-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21894-17084 Release Notes Release Notes 21914-17084 Security Update 0.12.0-12 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21914-17084 Release Notes Release Notes 22021-17084 Security Update 1.7.0-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22021-17084 Release Notes Release Notes 22022-17084 Security Update 0.8.2-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22022-17084 Release Notes Release Notes 21929-17084 Security Update 1.14.4-14 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21929-17084 Release Notes Release Notes 22023-17084 Security Update 3.7.0-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22023-17084 Release Notes Release Notes 21903-17084 Security Update 1.31.0-35 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21903-17084 Release Notes Release Notes 21972-17084 Security Update 19.0.4-15 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21972-17084 Release Notes 1.0 2026-10-11T01:35:05 <p>Information published.</p> 3.0 2026-10-12T15:24:25 <p>Information published.</p> 5.0 2026-10-16T01:02:39 <p>Information published.</p> 10.0 2026-10-18T01:45:33 <p>Information published.</p> 12.0 2026-10-24T01:46:04 <p>Information published.</p> 11.0 2026-10-21T01:43:15 <p>Information published.</p> 7.0 2026-10-17T01:04:24 <p>Information published.</p> 6.0 2026-10-16T01:50:22 <p>Information published.</p> 2.0 2026-10-12T02:20:09 <p>Information published.</p> 4.0 2026-10-14T15:16:16 <p>Information published.</p> 8.0 2026-10-17T01:47:15 <p>Information published.</p> 9.0 2026-10-17T14:47:57 <p>Information published.</p> 19.0 2026-11-02T01:46:26 <p>Information published.</p> 14.0 2026-10-25T01:46:18 <p>Information published.</p> 15.0 2026-10-28T01:45:23 <p>Information published.</p> 13.0 2026-10-24T14:47:38 <p>Information published.</p> 17.0 2026-10-31T14:45:40 <p>Information published.</p> 18.0 2026-11-01T14:56:42 <p>Information published.</p> 16.0 2026-10-31T01:02:41 <p>Information published.</p> Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net Mariner Go Yes CVE-2026-78661 22338-17084 22339-17084 22298-17084 22300-17084 22302-17084 22340-17084 22341-17084 22329-17084 22343-17084 22321-17084 22305-17084 22344-17084 22345-17084 22015-17084 22270-17084 22338-17084 22339-17084 22298-17084 22300-17084 22302-17084 22340-17084 22341-17084 22329-17084 22343-17084 22321-17084 22305-17084 22344-17084 22345-17084 22015-17084 22270-17084 Moderate 22338-17084 Moderate 22339-17084 Moderate 22298-17084 Moderate 22300-17084 Moderate 22302-17084 Moderate 22340-17084 Moderate 22341-17084 Moderate 22329-17084 Moderate 22343-17084 Moderate 22321-17084 Moderate 22305-17084 Moderate 22344-17084 Moderate 22345-17084 Moderate 22015-17084 Moderate 22270-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22338-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22339-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22298-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 22300-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22302-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22340-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22341-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22329-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22343-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22321-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22305-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22344-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22345-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22015-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22270-17084 Release Notes 22338-17084 22339-17084 22298-17084 22300-17084 22302-17084 22340-17084 22341-17084 22329-17084 22343-17084 22321-17084 22305-17084 22344-17084 22345-17084 22015-17084 22270-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22338-17084 22339-17084 22298-17084 22300-17084 22302-17084 22340-17084 22341-17084 22329-17084 22343-17084 22321-17084 22305-17084 22344-17084 22345-17084 22015-17084 22270-17084 Release Notes 5.0 2026-11-04T01:47:55 <p>Information published.</p> 3.0 2026-11-02T14:50:49 <p>Information published.</p> 4.0 2026-11-03T01:46:43 <p>Information published.</p> 2.0 2026-11-01T15:01:41 <p>Information published.</p> 1.0 2026-10-31T01:07:15 <p>Information published.</p> Double flow control refund on HTTP/2 server streams in net/http Mariner Go Yes CVE-2026-78663 Multiple Operations on Resource in Single-Operation Context 21925-17084 21926-17084 21901-17084 21771-17084 21899-17084 21915-17084 21916-17084 21904-17084 21927-17084 21893-17084 21902-17084 21913-17084 21807-17084 21772-17084 21914-17084 22021-17084 22022-17084 21857-17084 21809-17084 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22292-17084 22293-17084 22266-17084 21925-17084 21926-17084 21901-17084 21771-17084 21899-17084 21915-17084 21916-17084 21904-17084 21927-17084 21893-17084 21902-17084 21913-17084 21807-17084 21772-17084 21914-17084 22021-17084 22022-17084 21857-17084 21809-17084 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22292-17084 22293-17084 22266-17084 Important 21925-17084 Important 21926-17084 Important 21901-17084 Important 21771-17084 Important 21899-17084 Important 21915-17084 Important 21916-17084 Important 21904-17084 Important 21927-17084 Important 21893-17084 Important 21902-17084 Important 21913-17084 Important 21807-17084 Important 21772-17084 Important 21914-17084 Important 22021-17084 Important 22022-17084 Critical 21857-17084 Critical 21809-17084 Important 22283-17084 Important 22285-17084 Important 22289-17084 Important 22281-17084 Important 22055-17084 Critical 22292-17084 Critical 22293-17084 Important 22266-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21925-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21926-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21901-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21771-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21899-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21915-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21916-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21904-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21927-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21893-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21902-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21913-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21807-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21772-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21914-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22021-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22022-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 21857-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 21809-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22283-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22285-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22289-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22281-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22055-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 22292-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 22293-17084 9.1 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:U 22266-17084 Release Notes 21925-17084 Security Update 1.12.15-15 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21925-17084 Release Notes Release Notes 21926-17084 Security Update 0.5.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21926-17084 Release Notes Release Notes 21901-17084 Security Update 1.62.0-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21901-17084 Release Notes Release Notes 21771-17084 Security Update 3.5.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21771-17084 Release Notes Release Notes 21899-17084 Security Update 2.7.5-22 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21899-17084 Release Notes Release Notes 21915-17084 22283-17084 Security Update 4.1.0.kata1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21915-17084 22283-17084 Release Notes Release Notes 21916-17084 22285-17084 Security Update 3.15.0.aks0-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21916-17084 22285-17084 Release Notes Release Notes 21904-17084 Security Update 2.14.1-22 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21904-17084 Release Notes Release Notes 21927-17084 Security Update 0.0.10-11 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21927-17084 Release Notes Release Notes 21893-17084 22289-17084 Security Update 1.30.10-32 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21893-17084 22289-17084 Release Notes Release Notes 21902-17084 Security Update 1.8.4-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21902-17084 Release Notes Release Notes 21913-17084 22281-17084 Security Update 1.7.7-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21913-17084 22281-17084 Release Notes Release Notes 21807-17084 21857-17084 21809-17084 22055-17084 22292-17084 22293-17084 22266-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 21857-17084 21809-17084 22055-17084 22292-17084 22293-17084 22266-17084 Release Notes Release Notes 21772-17084 Security Update 0.63.0-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21772-17084 Release Notes Release Notes 21914-17084 Security Update 0.12.0-12 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21914-17084 Release Notes Release Notes 22021-17084 Security Update 1.7.0-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22021-17084 Release Notes Release Notes 22022-17084 Security Update 0.8.2-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22022-17084 Release Notes 1.0 2026-10-11T01:47:09 <p>Information published.</p> 3.0 2026-10-12T15:33:40 <p>Information published.</p> 4.0 2026-10-16T01:07:18 <p>Information published.</p> 9.0 2026-10-18T01:46:41 <p>Information published.</p> 11.0 2026-10-21T01:43:58 <p>Information published.</p> 6.0 2026-10-17T01:05:14 <p>Information published.</p> 5.0 2026-10-16T01:47:26 <p>Information published.</p> 2.0 2026-10-12T02:20:29 <p>Information published.</p> 7.0 2026-10-17T01:47:38 <p>Information published.</p> 8.0 2026-10-17T14:48:21 <p>Information published.</p> 10.0 2026-10-18T14:43:17 <p>Information published.</p> 18.0 2026-11-02T01:47:09 <p>Information published.</p> 13.0 2026-10-25T01:46:38 <p>Information published.</p> 14.0 2026-10-28T01:45:43 <p>Information published.</p> 12.0 2026-10-24T14:47:10 <p>Information published.</p> 16.0 2026-10-31T14:46:30 <p>Information published.</p> 17.0 2026-11-01T15:00:39 <p>Information published.</p> 15.0 2026-10-31T01:02:37 <p>Information published.</p> Lack of limit on size of parsed Range headers in net/http Mariner Go Yes CVE-2026-78667 Allocation of Resources Without Limits or Throttling 21857-17084 21809-17084 22292-17084 22293-17084 21857-17084 21809-17084 22292-17084 22293-17084 Important 21857-17084 Important 21809-17084 Important 22292-17084 Important 22293-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21857-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21809-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22292-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22293-17084 Release Notes 21857-17084 21809-17084 22292-17084 22293-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 21809-17084 22292-17084 22293-17084 Release Notes 1.0 2026-10-16T01:07:27 <p>Information published.</p> 2.0 2026-10-17T01:04:42 <p>Information published.</p> 4.0 2026-11-01T14:47:10 <p>Information published.</p> 3.0 2026-10-28T01:45:30 <p>Information published.</p> Excessive CPU consumption from repeated initial window changes in net/http Mariner Go Yes CVE-2026-78669 Asymmetric Resource Consumption (Amplification) 22015-17084 22016-17084 21923-17084 21925-17084 21907-17084 21926-17084 21908-17084 21901-17084 21921-17084 21909-17084 21910-17084 21856-17084 21911-17084 21771-17084 21912-17084 22017-17084 22018-17084 21857-17084 21809-17084 21796-17084 21899-17084 22019-17084 21915-17084 21916-17084 21904-17084 21927-17084 21893-17084 21902-17084 22020-17084 21913-17084 21807-17084 21928-17084 21772-17084 21894-17084 21914-17084 22021-17084 22022-17084 21929-17084 22023-17084 21903-17084 21972-17084 22292-17084 22293-17084 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22266-17084 22015-17084 22016-17084 21923-17084 21925-17084 21907-17084 21926-17084 21908-17084 21901-17084 21921-17084 21909-17084 21910-17084 21856-17084 21911-17084 21771-17084 21912-17084 22017-17084 22018-17084 21857-17084 21809-17084 21796-17084 21899-17084 22019-17084 21915-17084 21916-17084 21904-17084 21927-17084 21893-17084 21902-17084 22020-17084 21913-17084 21807-17084 21928-17084 21772-17084 21894-17084 21914-17084 22021-17084 22022-17084 21929-17084 22023-17084 21903-17084 21972-17084 22292-17084 22293-17084 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22266-17084 Important 22015-17084 Important 22016-17084 Important 21923-17084 Important 21925-17084 Important 21907-17084 Important 21926-17084 Important 21908-17084 Important 21901-17084 Important 21921-17084 Important 21909-17084 Important 21910-17084 Important 21856-17084 Important 21911-17084 Important 21771-17084 Important 21912-17084 Important 22017-17084 Important 22018-17084 Important 21857-17084 Important 21809-17084 Important 21796-17084 Important 21899-17084 Important 22019-17084 Important 21915-17084 Important 21916-17084 Important 21904-17084 Important 21927-17084 Important 21893-17084 Important 21902-17084 Important 22020-17084 Important 21913-17084 Important 21807-17084 Important 21928-17084 Important 21772-17084 Important 21894-17084 Important 21914-17084 Important 22021-17084 Important 22022-17084 Important 21929-17084 Important 22023-17084 Important 21903-17084 Important 21972-17084 Important 22292-17084 Important 22293-17084 Important 22283-17084 Important 22285-17084 Important 22289-17084 Important 22281-17084 Important 22055-17084 Important 22266-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22015-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22016-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21923-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21925-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21907-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21926-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21908-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21901-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21921-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21909-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21910-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21856-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21911-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21771-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21912-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22017-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22018-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21857-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21809-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21796-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21899-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22019-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21915-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21916-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21904-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21927-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21893-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21902-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22020-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21913-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21807-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21928-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21772-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21894-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21914-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22021-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22022-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21929-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22023-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21903-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21972-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22292-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22293-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22283-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22285-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22289-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22281-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22055-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22266-17084 Release Notes 22015-17084 Security Update 1.7.7-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22015-17084 Release Notes Release Notes 22016-17084 Security Update 10.25.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22016-17084 Release Notes Release Notes 21923-17084 Security Update 1.7.0-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21923-17084 Release Notes Release Notes 21925-17084 Security Update 1.12.15-15 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21925-17084 Release Notes Release Notes 21907-17084 Security Update 8.7.11-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21907-17084 Release Notes Release Notes 21926-17084 Security Update 0.5.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21926-17084 Release Notes Release Notes 21908-17084 Security Update 2.3.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21908-17084 Release Notes Release Notes 21901-17084 Security Update 1.62.0-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21901-17084 Release Notes Release Notes 21921-17084 Security Update 1.11.4-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21921-17084 Release Notes Release Notes 21909-17084 Security Update 1.32.0-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21909-17084 Release Notes Release Notes 21910-17084 Security Update 0.14.0-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21910-17084 Release Notes Release Notes 21856-17084 Security Update 25.0.7-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21856-17084 Release Notes Release Notes 21911-17084 Security Update 2.27.0-16 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21911-17084 Release Notes Release Notes 21771-17084 Security Update 3.5.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21771-17084 Release Notes Release Notes 21912-17084 Security Update 0.24.2-34 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21912-17084 Release Notes Release Notes 22017-17084 Security Update 2.102.0-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22017-17084 Release Notes Release Notes 22018-17084 Security Update 3.6.1-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22018-17084 Release Notes Release Notes 21857-17084 21809-17084 21807-17084 22292-17084 22293-17084 22055-17084 22266-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 21809-17084 21807-17084 22292-17084 22293-17084 22055-17084 22266-17084 Release Notes Release Notes 21796-17084 Security Update 2.22.0-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21796-17084 Release Notes Release Notes 21899-17084 Security Update 2.7.5-22 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21899-17084 Release Notes Release Notes 22019-17084 Security Update 3.10.182-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22019-17084 Release Notes Release Notes 21915-17084 22283-17084 Security Update 4.1.0.kata1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21915-17084 22283-17084 Release Notes Release Notes 21916-17084 22285-17084 Security Update 3.15.0.aks0-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21916-17084 22285-17084 Release Notes Release Notes 21904-17084 Security Update 2.14.1-22 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21904-17084 Release Notes Release Notes 21927-17084 Security Update 0.0.10-11 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21927-17084 Release Notes Release Notes 21893-17084 22289-17084 Security Update 1.30.10-32 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21893-17084 22289-17084 Release Notes Release Notes 21902-17084 Security Update 1.8.4-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21902-17084 Release Notes Release Notes 22020-17084 Security Update 1.15.0-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22020-17084 Release Notes Release Notes 21913-17084 22281-17084 Security Update 1.7.7-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21913-17084 22281-17084 Release Notes Release Notes 21928-17084 Security Update 4.0.2-12 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21928-17084 Release Notes Release Notes 21772-17084 Security Update 0.63.0-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21772-17084 Release Notes Release Notes 21894-17084 Security Update 1.9.5-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21894-17084 Release Notes Release Notes 21914-17084 Security Update 0.12.0-12 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21914-17084 Release Notes Release Notes 22021-17084 Security Update 1.7.0-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22021-17084 Release Notes Release Notes 22022-17084 Security Update 0.8.2-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22022-17084 Release Notes Release Notes 21929-17084 Security Update 1.14.4-14 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21929-17084 Release Notes Release Notes 22023-17084 Security Update 3.7.0-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22023-17084 Release Notes Release Notes 21903-17084 Security Update 1.31.0-35 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21903-17084 Release Notes Release Notes 21972-17084 Security Update 19.0.4-15 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21972-17084 Release Notes 1.0 2026-10-11T01:29:25 <p>Information published.</p> 3.0 2026-10-12T15:13:13 <p>Information published.</p> 8.0 2026-10-18T01:46:15 <p>Information published.</p> 11.0 2026-10-24T01:45:55 <p>Information published.</p> 10.0 2026-10-21T01:43:25 <p>Information published.</p> 5.0 2026-10-16T01:49:19 <p>Information published.</p> 2.0 2026-10-12T02:18:40 <p>Information published.</p> 4.0 2026-10-14T15:13:24 <p>Information published.</p> 6.0 2026-10-17T01:46:25 <p>Information published.</p> 7.0 2026-10-17T14:47:30 <p>Information published.</p> 9.0 2026-10-18T14:43:10 <p>Information published.</p> 17.0 2026-11-02T01:46:14 <p>Information published.</p> 13.0 2026-10-25T01:46:01 <p>Information published.</p> 12.0 2026-10-24T14:47:25 <p>Information published.</p> 15.0 2026-10-31T14:45:23 <p>Information published.</p> 16.0 2026-11-01T14:54:21 <p>Information published.</p> 14.0 2026-10-31T01:02:48 <p>Information published.</p> Apache HTTP Server: mod_userdir information disclosure Mariner apache Yes CVE-2026-79768 Path Equivalence: '/./' (Single Dot Directory) 21971-17084 21971-17084 Moderate 21971-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:22:35 <p>Information published.</p> 2.0 2026-10-10T15:07:05 <p>Information published.</p> 3.0 2026-10-13T01:59:26 <p>Information published.</p> Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Container element count not bounded by the bytes available Mariner apache Yes CVE-2026-82458 Memory Allocation with Excessive Size Value 21903-17084 21966-17084 21903-17084 21966-17084 Moderate 21903-17084 Moderate 21966-17084 Release Notes 21903-17084 Security Update 1.31.0-34 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21903-17084 Release Notes Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 3.0 2026-10-10T15:04:09 <p>Information published.</p> 5.0 2026-10-16T01:50:11 <p>Information published.</p> 2.0 2026-10-07T01:33:50 <p>Information published.</p> 4.0 2026-10-13T02:01:26 <p>Information published.</p> 1.0 2026-10-03T01:04:49 <p>Information published.</p> Apache Thrift: Integer underflow in C++ THeaderTransport allows an unauthenticated remote peer to terminate a 32-bit process Mariner apache Yes CVE-2026-82459 Integer Underflow (Wrap or Wraparound) 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 2.0 2026-10-10T15:07:03 <p>Information published.</p> 3.0 2026-10-13T02:04:17 <p>Information published.</p> 1.0 2026-10-03T01:07:29 <p>Information published.</p> Apache Thrift: C++ THttpTransport grows its line buffer without bound Mariner apache Yes CVE-2026-83632 Allocation of Resources Without Limits or Throttling 21966-17084 21966-17084 Critical 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 3.0 2026-10-10T15:30:50 <p>Information published.</p> 2.0 2026-10-05T15:25:12 <p>Information published.</p> 4.0 2026-10-13T02:33:22 <p>Information published.</p> 1.0 2026-10-04T01:03:23 <p>Information published.</p> Apache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go) Mariner apache Yes CVE-2026-83663 Uncontrolled Recursion 21903-17084 21903-17084 Important 21903-17084 Release Notes 21903-17084 Security Update 1.31.0-34 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21903-17084 Release Notes 4.0 2026-10-16T01:50:16 <p>Information published.</p> 1.0 2026-10-07T01:35:18 <p>Information published.</p> 3.0 2026-10-13T02:36:32 <p>Information published.</p> 2.0 2026-10-10T14:47:46 <p>Information published.</p> Apache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D) Mariner apache Yes CVE-2026-83745 Memory Allocation with Excessive Size Value 21966-17084 21966-17084 Important 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 2.0 2026-10-05T15:25:55 <p>Information published.</p> 4.0 2026-10-13T02:34:10 <p>Information published.</p> 3.0 2026-10-10T14:43:52 <p>Information published.</p> 1.0 2026-10-04T01:03:55 <p>Information published.</p> Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation Mariner GitHub_M Yes CVE-2026-83813 Origin Validation Error 21981-17084 22297-17084 21981-17084 22297-17084 Low 21981-17084 Low 22297-17084 3.1 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 21981-17084 3.1 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 22297-17084 Release Notes 21981-17084 22297-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21981-17084 22297-17084 Release Notes 2.0 2026-10-29T14:44:33 <p>Information published.</p> 1.0 2026-10-29T01:10:00 <p>Information published.</p> 3.0 2026-11-01T14:54:43 <p>Information published.</p> gettext: Directory traversal via the LANGUAGE environment variable Mariner glibc Yes CVE-2026-84243 Improper Limitation of a Pathname to a Restricted Directory 21824-17084 21824-17084 Important 21824-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21824-17084 Release Notes 21824-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21824-17084 Release Notes 1.0 2026-11-01T02:02:03 <p>Information published.</p> 2.0 2026-11-02T14:52:02 <p>Information published.</p> Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op Mariner apache Yes CVE-2026-85087 Improper Certificate Validation 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 2.0 2026-10-10T15:00:59 <p>Information published.</p> 3.0 2026-10-13T01:58:11 <p>Information published.</p> 1.0 2026-10-03T01:02:08 <p>Information published.</p> Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match Mariner apache Yes CVE-2026-85088 Improper Certificate Validation 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 1.0 2026-10-07T01:40:35 <p>Information published.</p> 3.0 2026-10-13T02:38:19 <p>Information published.</p> 2.0 2026-10-10T14:49:43 <p>Information published.</p> Apache Thrift: c_glib `read_all` spins when the underlying read returns 0 Mariner apache Yes CVE-2026-85476 Loop with Unreachable Exit Condition ('Infinite Loop') 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 1.0 2026-10-07T01:40:11 <p>Information published.</p> 3.0 2026-10-13T02:37:57 <p>Information published.</p> 2.0 2026-10-10T14:49:18 <p>Information published.</p> Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end Mariner apache Yes CVE-2026-85483 Use of Uninitialized Resource 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 1.0 2026-10-07T01:02:44 <p>Information published.</p> 2.0 2026-10-10T14:59:39 <p>Information published.</p> 3.0 2026-10-13T01:52:15 <p>Information published.</p> Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: Framed transport and binary protocol size read buffers from a peer-declared length without a limit (multi-language) Mariner apache Yes CVE-2026-85494 Improper Handling of Length Parameter Inconsistency 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 2.0 2026-10-10T15:03:27 <p>Information published.</p> 3.0 2026-10-13T02:00:30 <p>Information published.</p> 1.0 2026-10-03T01:04:26 <p>Information published.</p> stale SigV4 headers sent unintended Mariner curl Yes CVE-2026-86409 22318-17084 22318-17084 Low 22318-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 22318-17084 Release Notes 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22318-17084 Release Notes 1.0 2026-10-23T01:03:18 <p>Information published.</p> 4.0 2026-11-04T14:44:29 <p>Information published.</p> 3.0 2026-11-01T14:52:28 <p>Information published.</p> 2.0 2026-10-28T01:45:54 <p>Information published.</p> redirect to SFTP or SCP bypasses host verification Mariner curl Yes CVE-2026-86410 21707-17084 22318-17084 21707-17084 22318-17084 Moderate 21707-17084 Moderate 22318-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U 21707-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U 22318-17084 Release Notes 21707-17084 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21707-17084 22318-17084 Release Notes 1.0 2026-10-23T01:07:17 <p>Information published.</p> 2.0 2026-10-23T14:45:15 <p>Information published.</p> 4.0 2026-11-01T14:52:39 <p>Information published.</p> 3.0 2026-10-28T01:47:30 <p>Information published.</p> leaking host credentials to HTTP proxy Mariner curl Yes CVE-2026-86414 21707-17084 22318-17084 21707-17084 22318-17084 Moderate 21707-17084 Moderate 22318-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U 21707-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U 22318-17084 Release Notes 21707-17084 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21707-17084 22318-17084 Release Notes 1.0 2026-10-23T01:04:17 <p>Information published.</p> 3.0 2026-10-24T01:44:48 <p>Information published.</p> 2.0 2026-10-23T14:45:19 <p>Information published.</p> 5.0 2026-11-01T14:52:43 <p>Information published.</p> 4.0 2026-10-28T01:46:14 <p>Information published.</p> Dpdk: dpdk: control-queue descriptor double-fetch overflows host heap in dpdk vhost (vduse) Mariner redhat Yes CVE-2026-86562 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 17527-17084 17527-17084 Important 17527-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 17527-17084 Release Notes 17527-17084 Security Update 23.11.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17527-17084 Release Notes 1.0 2026-10-17T01:04:10 <p>Information published.</p> 3.0 2026-10-25T01:47:03 <p>Information published.</p> 2.0 2026-10-24T14:49:37 <p>Information published.</p> Dpdk: dpdk: guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write Mariner redhat Yes CVE-2026-86565 Out-of-bounds Write 17527-17084 17527-17084 Moderate 17527-17084 6.7 6.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:H/E:U 17527-17084 Release Notes 17527-17084 Security Update 23.11.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17527-17084 Release Notes 1.0 2026-10-17T01:03:50 <p>Information published.</p> 3.0 2026-10-25T01:46:53 <p>Information published.</p> 2.0 2026-10-24T14:49:25 <p>Information published.</p> Dpdk: dpdk: vduse handler fails to invalidate vring pointers when iotlb is invalidated, leading to use-after-unmap Mariner redhat Yes CVE-2026-86567 Use After Free 17527-17084 17527-17084 Important 17527-17084 8.8 8.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U 17527-17084 Release Notes 17527-17084 Security Update 23.11.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17527-17084 Release Notes 1.0 2026-10-17T01:03:58 <p>Information published.</p> 3.0 2026-10-25T01:46:56 <p>Information published.</p> 2.0 2026-10-24T14:49:29 <p>Information published.</p> HSTS cache import drops longer-lived child Mariner curl Yes CVE-2026-87862 21707-17084 22318-17084 21707-17084 22318-17084 Moderate 21707-17084 Moderate 22318-17084 4.8 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N 21707-17084 4.8 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N 22318-17084 Release Notes 21707-17084 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21707-17084 22318-17084 Release Notes 1.0 2026-10-23T01:07:32 <p>Information published.</p> 2.0 2026-10-23T14:45:29 <p>Information published.</p> 4.0 2026-11-01T14:53:53 <p>Information published.</p> 3.0 2026-10-28T01:47:38 <p>Information published.</p> HSTS response erases persisted entries Mariner curl Yes CVE-2026-87863 21707-17084 22318-17084 21707-17084 22318-17084 Moderate 21707-17084 Moderate 22318-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L 21707-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L 22318-17084 Release Notes 21707-17084 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21707-17084 22318-17084 Release Notes 1.0 2026-10-23T01:03:07 <p>Information published.</p> 2.0 2026-10-23T14:45:00 <p>Information published.</p> 4.0 2026-11-01T14:54:13 <p>Information published.</p> 3.0 2026-10-28T01:45:48 <p>Information published.</p> IMAP APPEND plus CRLF conversion command injection Mariner curl Yes CVE-2026-87864 21707-17084 22318-17084 21707-17084 22318-17084 Important 21707-17084 Important 22318-17084 8.2 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U 21707-17084 8.2 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U 22318-17084 Release Notes 21707-17084 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21707-17084 22318-17084 Release Notes 1.0 2026-10-23T01:06:03 <p>Information published.</p> 3.0 2026-10-24T01:44:53 <p>Information published.</p> 2.0 2026-10-23T14:45:37 <p>Information published.</p> 5.0 2026-11-01T14:54:07 <p>Information published.</p> 4.0 2026-10-28T01:47:07 <p>Information published.</p> knownhost callback mismatches key as missing Mariner curl Yes CVE-2026-87865 22318-17084 22318-17084 Moderate 22318-17084 6.8 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N 22318-17084 Release Notes 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22318-17084 Release Notes 1.0 2026-10-23T01:06:36 <p>Information published.</p> 4.0 2026-11-04T14:44:11 <p>Information published.</p> 3.0 2026-11-01T14:52:19 <p>Information published.</p> 2.0 2026-10-28T01:47:21 <p>Information published.</p> A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate. Mariner mitre Yes CVE-2026-88647 Improper Validation of Certificate with Host Mismatch 22025-17084 22025-17084 Important 22025-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 22025-17084 Release Notes 22025-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22025-17084 Release Notes 1.0 2026-10-11T01:53:27 <p>Information published.</p> 2.0 2026-10-12T15:36:33 <p>Information published.</p> Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates. Mariner mitre Yes CVE-2026-88648 22025-17084 22025-17084 Moderate 22025-17084 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N 22025-17084 Release Notes 22025-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22025-17084 Release Notes 1.0 2026-10-11T01:52:33 <p>Information published.</p> 2.0 2026-10-13T02:45:21 <p>Information published.</p> X.Org Server XKB SetGeometry TextDoodad Double Free Mariner suse Yes CVE-2026-88812 Double Free 22264-17084 22264-17084 Important 22264-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22264-17084 Release Notes 22264-17084 Security Update 24.1.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22264-17084 Release Notes 5.0 2026-11-04T01:45:09 <p>Information published.</p> 4.0 2026-11-02T01:49:07 <p>Information published.</p> 2.0 2026-10-31T01:01:35 <p>Information published.</p> 1.0 2026-10-29T01:03:09 <p>Information published.</p> 3.0 2026-11-01T14:47:01 <p>Information published.</p> Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy Mariner redhat Yes CVE-2026-88829 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 21821-17084 22279-17084 21821-17084 22279-17084 Important 21821-17084 Important 22279-17084 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N 21821-17084 7.2 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N 22279-17084 Release Notes 21821-17084 22279-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21821-17084 22279-17084 Release Notes 1.0 2026-10-21T01:11:10 <p>Information published.</p> 2.0 2026-11-01T14:52:05 <p>Information published.</p> Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service Mariner redhat Yes CVE-2026-88833 Integer Underflow (Wrap or Wraparound) 21821-17084 22279-17084 21821-17084 22279-17084 Moderate 21821-17084 Moderate 22279-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21821-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22279-17084 Release Notes 21821-17084 22279-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21821-17084 22279-17084 Release Notes 1.0 2026-10-17T01:03:02 <p>Information published.</p> 2.0 2026-11-01T14:48:53 <p>Information published.</p> Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions Mariner redhat Yes CVE-2026-88838 Protection Mechanism Failure 21821-17084 22279-17084 21821-17084 22279-17084 Moderate 21821-17084 Moderate 22279-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 21821-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 22279-17084 Release Notes 21821-17084 22279-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21821-17084 22279-17084 Release Notes 1.0 2026-10-17T01:03:10 <p>Information published.</p> 2.0 2026-11-01T14:48:58 <p>Information published.</p> Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption Mariner redhat Yes CVE-2026-88842 Out-of-bounds Read 21821-17084 22279-17084 21821-17084 22279-17084 Low 21821-17084 Low 22279-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N 21821-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N 22279-17084 Release Notes 21821-17084 22279-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21821-17084 22279-17084 Release Notes 1.0 2026-10-21T01:10:58 <p>Information published.</p> 2.0 2026-11-01T14:51:54 <p>Information published.</p> Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution Mariner redhat Yes CVE-2026-89091 Improper Link Resolution Before File Access ('Link Following') 19586-17084 19586-17084 Important 19586-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 19586-17084 Release Notes 19586-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19586-17084 Release Notes 1.0 2026-10-11T01:17:14 <p>Information published.</p> 2.0 2026-10-13T02:02:49 <p>Information published.</p> Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd Mariner redhat Yes CVE-2026-89098 Reachable Assertion 22076-17084 22316-17084 22076-17084 22316-17084 Moderate 22076-17084 Moderate 22316-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22076-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22316-17084 Release Notes 22076-17084 22316-17084 Security Update 2.6.4-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22076-17084 22316-17084 Release Notes 2.0 2026-10-24T01:44:12 <p>Information published.</p> 1.0 2026-10-21T01:11:40 <p>Information published.</p> 3.0 2026-11-01T14:52:11 <p>Information published.</p> Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush Mariner redhat Yes CVE-2026-90954 Improper Link Resolution Before File Access ('Link Following') 21821-17084 22279-17084 21821-17084 22279-17084 Important 21821-17084 Important 22279-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U 21821-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U 22279-17084 Release Notes 21821-17084 22279-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21821-17084 22279-17084 Release Notes 1.0 2026-10-21T01:11:04 <p>Information published.</p> 2.0 2026-11-01T14:52:00 <p>Information published.</p> Apache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction) Mariner apache Yes CVE-2026-91135 Heap-based Buffer Overflow 21966-17084 21966-17084 Important 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 2.0 2026-10-10T15:06:39 <p>Information published.</p> 3.0 2026-10-13T02:03:54 <p>Information published.</p> 1.0 2026-10-03T01:07:07 <p>Information published.</p> server-set cookie aborts cookie jar load Mariner curl Yes CVE-2026-92386 21707-17084 22318-17084 21707-17084 22318-17084 Low 21707-17084 Low 22318-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 21707-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 22318-17084 Release Notes 21707-17084 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21707-17084 22318-17084 Release Notes 1.0 2026-10-23T01:01:57 <p>Information published.</p> 2.0 2026-10-23T14:44:42 <p>Information published.</p> 4.0 2026-11-01T14:54:02 <p>Information published.</p> 3.0 2026-10-28T01:45:21 <p>Information published.</p> never-ending loop via server response omission Mariner curl Yes CVE-2026-92387 21707-17084 22318-17084 21707-17084 22318-17084 Moderate 21707-17084 Moderate 22318-17084 5.3 4.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U 21707-17084 5.3 4.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U 22318-17084 Release Notes 21707-17084 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21707-17084 22318-17084 Release Notes 1.0 2026-10-23T01:07:47 <p>Information published.</p> 2.0 2026-10-23T14:45:33 <p>Information published.</p> 4.0 2026-11-01T14:53:58 <p>Information published.</p> 3.0 2026-10-28T01:47:42 <p>Information published.</p> TFTP direction confusion Mariner curl Yes CVE-2026-92389 22318-17084 22318-17084 Moderate 22318-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 22318-17084 Release Notes 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22318-17084 Release Notes 1.0 2026-10-23T01:06:20 <p>Information published.</p> 4.0 2026-11-04T14:44:23 <p>Information published.</p> 3.0 2026-11-01T14:52:26 <p>Information published.</p> 2.0 2026-10-28T01:47:14 <p>Information published.</p> -J no-clobber guarantee bypassed with 103 early hints Mariner curl Yes CVE-2026-92390 22318-17084 22318-17084 Moderate 22318-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 22318-17084 Release Notes 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22318-17084 Release Notes 1.0 2026-10-23T01:07:25 <p>Information published.</p> 4.0 2026-11-04T14:44:35 <p>Information published.</p> 3.0 2026-11-01T14:52:45 <p>Information published.</p> 2.0 2026-10-28T01:47:33 <p>Information published.</p> curl_mime_free stack overflow by recursion Mariner curl Yes CVE-2026-92391 21707-17084 22318-17084 21707-17084 22318-17084 Moderate 21707-17084 Moderate 22318-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21707-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22318-17084 Release Notes 21707-17084 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21707-17084 22318-17084 Release Notes 1.0 2026-10-23T01:02:21 <p>Information published.</p> 2.0 2026-10-23T14:44:51 <p>Information published.</p> 4.0 2026-11-01T14:52:33 <p>Information published.</p> 3.0 2026-10-28T01:45:27 <p>Information published.</p> Blind VXLAN injection into encrypted overlay networks from cluster peer Mariner Docker Yes CVE-2026-92542 Authentication Bypass by Spoofing 21807-17084 21807-17084 Moderate 21807-17084 Release Notes 21807-17084 Security Update 25.0.18-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 Release Notes 1.0 2026-10-11T02:00:08 <p>Information published.</p> 2.0 2026-10-13T02:51:54 <p>Information published.</p> 3.0 2026-10-17T01:48:44 <p>Information published.</p> Docker Engine insecure-registry fallback via malicious DNS responses Mariner Docker Yes CVE-2026-92543 Improper Certificate Validation 21925-17084 21910-17084 21856-17084 21911-17084 21807-17084 22055-17084 21925-17084 21910-17084 21856-17084 21911-17084 21807-17084 22055-17084 Important 21925-17084 Important 21910-17084 Important 21856-17084 Important 21911-17084 Important 21807-17084 Important 22055-17084 Release Notes 21925-17084 Security Update 1.12.15-15 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21925-17084 Release Notes Release Notes 21910-17084 Security Update 0.14.0-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21910-17084 Release Notes Release Notes 21856-17084 Security Update 25.0.7-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21856-17084 Release Notes Release Notes 21911-17084 Security Update 2.27.0-16 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21911-17084 Release Notes Release Notes 21807-17084 22055-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 22055-17084 Release Notes 1.0 2026-10-11T01:48:03 <p>Information published.</p> 2.0 2026-10-12T15:34:58 <p>Information published.</p> 3.0 2026-10-17T01:48:00 <p>Information published.</p> 4.0 2026-11-01T14:45:05 <p>Information published.</p> Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE Mariner GitHub_M Yes CVE-2026-92709 Improper Limitation of a Pathname to a Restricted Directory 21917-17084 21917-17084 Important 21917-17084 7.7 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U 21917-17084 Release Notes 21917-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21917-17084 Release Notes 1.0 2026-10-30T01:01:27 <p>Information published.</p> Apache Thrift: C++ WebSocket server transport does not read a full request length Mariner apache Yes CVE-2026-92834 Use of Uninitialized Resource 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 2.0 2026-10-10T15:06:14 <p>Information published.</p> 3.0 2026-10-13T02:03:29 <p>Information published.</p> 1.0 2026-10-03T01:06:42 <p>Information published.</p> Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file content Mariner redhat Yes CVE-2026-93006 Operation on a Resource after Expiration or Release 21735-17084 21735-17084 Moderate 21735-17084 6.8 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U 21735-17084 Release Notes 21735-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21735-17084 Release Notes 1.0 2026-11-03T01:05:26 <p>Information published.</p> Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validation Mariner redhat Yes CVE-2026-93007 Uncontrolled Resource Consumption 21735-17084 21735-17084 Moderate 21735-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21735-17084 Release Notes 21735-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21735-17084 Release Notes 1.0 2026-11-03T01:05:33 <p>Information published.</p> Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurations Mariner redhat Yes CVE-2026-93008 Insufficient Verification of Data Authenticity 21735-17084 21735-17084 Moderate 21735-17084 6.8 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N 21735-17084 Release Notes 21735-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21735-17084 Release Notes 1.0 2026-11-03T01:05:46 <p>Information published.</p> Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoder Mariner redhat Yes CVE-2026-93009 Out-of-bounds Read 21735-17084 21735-17084 Moderate 21735-17084 4.3 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21735-17084 Release Notes 21735-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21735-17084 Release Notes 1.0 2026-11-03T01:05:57 <p>Information published.</p> Dnsmasq: dnsmasq: --leasequery without address argument applies no source address check Mariner redhat Yes CVE-2026-93010 Missing Authorization 21735-17084 21735-17084 Moderate 21735-17084 4.3 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21735-17084 Release Notes 21735-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21735-17084 Release Notes 1.0 2026-11-03T01:05:52 <p>Information published.</p> Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transforms Mariner redhat Yes CVE-2026-93011 Out-of-bounds Write 21735-17084 21735-17084 Moderate 21735-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21735-17084 Release Notes 21735-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21735-17084 Release Notes 1.0 2026-11-03T01:05:40 <p>Information published.</p> Cache poisoning via unvalidated image layer DiffIDs Mariner Docker Yes CVE-2026-93318 Improper Validation of Integrity Check Value 21807-17084 22055-17084 21807-17084 22055-17084 Important 21807-17084 Important 22055-17084 Release Notes 21807-17084 22055-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 22055-17084 Release Notes 1.0 2026-10-09T01:41:29 <p>Information published.</p> 2.0 2026-11-01T14:50:44 <p>Information published.</p> A malicious frontend can cause a daemon panic Mariner Docker Yes CVE-2026-93319 Unsynchronized Access to Shared Data in a Multithreaded Context 21807-17084 22055-17084 21807-17084 22055-17084 Moderate 21807-17084 Moderate 22055-17084 Release Notes 21807-17084 22055-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 22055-17084 Release Notes 1.0 2026-10-09T01:37:38 <p>Information published.</p> 2.0 2026-11-01T14:50:27 <p>Information published.</p> BuildKit improperly handles special files in build snapshots Mariner Docker Yes CVE-2026-93320 Unintended Proxy or Intermediary ('Confused Deputy') 21807-17084 22055-17084 21807-17084 22055-17084 Moderate 21807-17084 Moderate 22055-17084 Release Notes 21807-17084 22055-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 22055-17084 Release Notes 1.0 2026-10-09T01:35:51 <p>Information published.</p> 2.0 2026-11-01T14:50:22 <p>Information published.</p> Malformed LLB file operation can crash buildkitd Mariner Docker Yes CVE-2026-93321 Improper Validation of Array Index 21807-17084 22055-17084 21807-17084 22055-17084 Moderate 21807-17084 Moderate 22055-17084 Release Notes 21807-17084 22055-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 22055-17084 Release Notes 1.0 2026-10-09T01:42:41 <p>Information published.</p> 2.0 2026-11-01T14:50:49 <p>Information published.</p> Malformed MergeOp can crash the BuildKit daemon Mariner Docker Yes CVE-2026-93322 Improper Validation of Array Index 21807-17084 22055-17084 21807-17084 22055-17084 Moderate 21807-17084 Moderate 22055-17084 Release Notes 21807-17084 22055-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 22055-17084 Release Notes 1.0 2026-10-09T01:40:12 <p>Information published.</p> 2.0 2026-11-01T14:50:39 <p>Information published.</p> Oversized Dockerfile or .dockerignore can exhaust buildkitd memory Mariner Docker Yes CVE-2026-93323 Memory Allocation with Excessive Size Value 21807-17084 21807-17084 Moderate 21807-17084 Release Notes 21807-17084 Security Update 25.0.18-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 Release Notes 2.0 2026-10-16T01:45:26 <p>Information published.</p> 1.0 2026-10-09T01:09:33 <p>Information published.</p> 3.0 2026-10-17T01:43:35 <p>Information published.</p> Crafted Git build source can bypass certain policy validation Mariner Docker Yes CVE-2026-93326 Incorrect Behavior Order: Validate Before Canonicalize 21807-17084 22055-17084 21807-17084 22055-17084 Moderate 21807-17084 Moderate 22055-17084 Release Notes 21807-17084 22055-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 22055-17084 Release Notes 1.0 2026-10-09T01:39:00 <p>Information published.</p> 2.0 2026-11-01T14:50:34 <p>Information published.</p> NGINX Map directive and Regex matching vulnerability Mariner f5 Yes CVE-2026-93479 Heap-based Buffer Overflow 22054-17084 22054-17084 Critical 22054-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 22054-17084 Release Notes 22054-17084 Security Update 1.30.6-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22054-17084 Release Notes 1.0 2026-10-17T01:08:05 <p>Information published.</p> 3.0 2026-11-02T01:48:23 <p>Information published.</p> 2.0 2026-11-01T14:49:31 <p>Information published.</p> .Org Server Present Extension Use-After-Free Mariner suse Yes CVE-2026-93515 Use After Free 22264-17084 22264-17084 22264-17084 Release Notes 22264-17084 Security Update 24.1.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22264-17084 Release Notes 5.0 2026-11-04T01:45:27 <p>Information published.</p> 4.0 2026-11-02T01:49:32 <p>Information published.</p> 1.0 2026-10-30T01:01:32 <p>Information published.</p> 2.0 2026-10-31T01:02:01 <p>Information published.</p> 3.0 2026-11-01T14:56:29 <p>Information published.</p> .Org Server XInput Passive Grab Use-After-Free Mariner suse Yes CVE-2026-93516 Use After Free 22264-17084 22264-17084 22264-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22264-17084 Release Notes 22264-17084 Security Update 24.1.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22264-17084 Release Notes 5.0 2026-11-04T01:45:29 <p>Information published.</p> 4.0 2026-11-02T01:49:22 <p>Information published.</p> 1.0 2026-10-30T01:01:37 <p>Information published.</p> 2.0 2026-10-31T01:01:48 <p>Information published.</p> 3.0 2026-11-01T14:56:34 <p>Information published.</p> X.Org Server GLX RenderLarge Heap Buffer Overflow Mariner suse Yes CVE-2026-93517 Heap-based Buffer Overflow 22264-17084 22264-17084 Moderate 22264-17084 Release Notes 22264-17084 Security Update 24.1.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22264-17084 Release Notes 5.0 2026-11-04T01:45:30 <p>Information published.</p> 4.0 2026-11-02T01:49:29 <p>Information published.</p> 1.0 2026-10-30T01:01:42 <p>Information published.</p> 2.0 2026-10-31T01:01:59 <p>Information published.</p> 3.0 2026-11-01T14:56:38 <p>Information published.</p> X.Org Server XKB ResizeKeyType Numeric Truncation Mariner suse Yes CVE-2026-93518 Heap-based Buffer Overflow 22264-17084 22264-17084 Important 22264-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22264-17084 Release Notes 22264-17084 Security Update 24.1.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22264-17084 Release Notes 5.0 2026-11-04T01:45:32 <p>Information published.</p> 4.0 2026-11-02T01:49:00 <p>Information published.</p> 1.0 2026-10-30T01:01:47 <p>Information published.</p> 3.0 2026-11-01T14:56:44 <p>Information published.</p> 2.0 2026-10-31T01:14:58 <p>Information published.</p> X.Org Server XFixes Pointer Barrier Event List Buffer Overflow Mariner suse Yes CVE-2026-93519 Heap-based Buffer Overflow 22264-17084 22264-17084 Important 22264-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22264-17084 Release Notes 22264-17084 Security Update 24.1.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22264-17084 Release Notes 5.0 2026-11-04T01:45:34 <p>Information published.</p> 4.0 2026-11-02T01:49:11 <p>Information published.</p> 1.0 2026-10-30T01:01:52 <p>Information published.</p> 2.0 2026-10-31T01:01:39 <p>Information published.</p> 3.0 2026-11-01T14:56:49 <p>Information published.</p> X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write Mariner suse Yes CVE-2026-93520 Heap-based Buffer Overflow 22264-17084 22264-17084 Important 22264-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22264-17084 Release Notes 22264-17084 Security Update 24.1.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22264-17084 Release Notes 5.0 2026-11-04T01:45:36 <p>Information published.</p> 4.0 2026-11-02T01:49:36 <p>Information published.</p> 1.0 2026-10-30T01:01:57 <p>Information published.</p> 2.0 2026-10-31T01:02:07 <p>Information published.</p> 3.0 2026-11-01T14:57:03 <p>Information published.</p> X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow Mariner suse Yes CVE-2026-93521 Heap-based Buffer Overflow 22264-17084 22264-17084 Important 22264-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22264-17084 Release Notes 22264-17084 Security Update 24.1.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22264-17084 Release Notes 5.0 2026-11-04T01:45:38 <p>Information published.</p> 4.0 2026-11-02T01:49:15 <p>Information published.</p> 1.0 2026-10-30T01:02:02 <p>Information published.</p> 2.0 2026-10-31T01:01:43 <p>Information published.</p> 3.0 2026-11-01T14:57:11 <p>Information published.</p> X.Org Server Glamor CopyArea Heap Buffer Overflow Mariner suse Yes CVE-2026-93522 Heap-based Buffer Overflow 22264-17084 22264-17084 Important 22264-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22264-17084 Release Notes 22264-17084 Security Update 24.1.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22264-17084 Release Notes 3.0 2026-11-02T01:49:26 <p>Information published.</p> 1.0 2026-10-31T01:01:54 <p>Information published.</p> 2.0 2026-11-01T14:56:31 <p>Information published.</p> X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write Mariner suse Yes CVE-2026-93523 Heap-based Buffer Overflow 22264-17084 22264-17084 Important 22264-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22264-17084 Release Notes 22264-17084 Security Update 24.1.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22264-17084 Release Notes 5.0 2026-11-04T01:45:40 <p>Information published.</p> 4.0 2026-11-02T01:49:03 <p>Information published.</p> 1.0 2026-10-30T01:02:07 <p>Information published.</p> 3.0 2026-11-01T14:57:22 <p>Information published.</p> 2.0 2026-10-31T01:15:06 <p>Information published.</p> X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read Mariner suse Yes CVE-2026-93524 Buffer Over-read 22264-17084 22264-17084 22264-17084 Release Notes 22264-17084 Security Update 24.1.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22264-17084 Release Notes 5.0 2026-11-04T01:45:43 <p>Information published.</p> 4.0 2026-11-02T01:49:39 <p>Information published.</p> 1.0 2026-10-30T01:02:12 <p>Information published.</p> 2.0 2026-10-31T01:02:09 <p>Information published.</p> 3.0 2026-11-01T14:57:30 <p>Information published.</p> X.Org Server GestureBuildSprite Use-After-Free Mariner suse Yes CVE-2026-93536 Heap-based Buffer Overflow 22264-17084 22264-17084 22264-17084 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H 22264-17084 Release Notes 22264-17084 Security Update 24.1.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22264-17084 Release Notes 5.0 2026-11-04T01:45:45 <p>Information published.</p> 4.0 2026-11-02T01:49:18 <p>Information published.</p> 1.0 2026-10-30T01:02:17 <p>Information published.</p> 2.0 2026-10-31T01:01:45 <p>Information published.</p> 3.0 2026-11-01T14:57:38 <p>Information published.</p> Apache HTTP Server: mod_dav_fs namespace overflow Mariner apache Yes CVE-2026-93546 Integer Overflow or Wraparound 21971-17084 21971-17084 Important 21971-17084 8.8 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21971-17084 Release Notes 21971-17084 Security Update 2.4.69-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-09T01:16:07 <p>Information published.</p> 2.0 2026-10-10T15:05:01 <p>Information published.</p> 3.0 2026-10-13T01:57:33 <p>Information published.</p> Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id Mariner apache Yes CVE-2026-93925 Stack-based Buffer Overflow 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 2.0 2026-10-10T15:01:48 <p>Information published.</p> 3.0 2026-10-13T01:58:57 <p>Information published.</p> 1.0 2026-10-03T01:02:55 <p>Information published.</p> Apache Thrift: C++ `THeaderTransport::untransform()` leaks the zlib stream on the error path Mariner apache Yes CVE-2026-93926 Missing Release of Memory after Effective Lifetime 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 2.0 2026-10-10T15:04:58 <p>Information published.</p> 3.0 2026-10-13T02:02:16 <p>Information published.</p> 1.0 2026-10-03T01:05:36 <p>Information published.</p> TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl Mariner EEF Yes CVE-2026-94200 Improper Validation of Consistency within Input 21841-17084 21841-17084 Important 21841-17084 Release Notes 21841-17084 Security Update 26.2.5.21-8 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21841-17084 Release Notes 1.0 2026-10-16T01:06:55 <p>Information published.</p> 3.0 2026-10-30T01:44:14 <p>Information published.</p> 2.0 2026-10-28T14:43:44 <p>Information published.</p> password leak in CURLINFO_EFFECTIVE_URL Mariner curl Yes CVE-2026-94266 22318-17084 22318-17084 Moderate 22318-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 22318-17084 Release Notes 22318-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22318-17084 Release Notes 1.0 2026-10-23T01:02:44 <p>Information published.</p> 4.0 2026-11-04T14:44:17 <p>Information published.</p> 3.0 2026-11-01T14:52:24 <p>Information published.</p> 2.0 2026-10-28T01:45:42 <p>Information published.</p> Concurrent GSS-TSIG messages corrupt memory Mariner isc Yes CVE-2026-94300 Double Free 21677-17084 22331-17084 21677-17084 22331-17084 Important 21677-17084 Important 22331-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21677-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 22331-17084 Release Notes 21677-17084 22331-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21677-17084 22331-17084 Release Notes 1.0 2026-10-30T01:02:27 <p>Information published.</p> 2.0 2026-11-01T14:58:00 <p>Information published.</p> HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http Mariner Go Yes CVE-2026-94439 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 21857-17084 21809-17084 22292-17084 22293-17084 21857-17084 21809-17084 22292-17084 22293-17084 Important 21857-17084 Important 21809-17084 Important 22292-17084 Important 22293-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21857-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21809-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 22292-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 22293-17084 Release Notes 21857-17084 21809-17084 22292-17084 22293-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 21809-17084 22292-17084 22293-17084 Release Notes 1.0 2026-10-16T01:07:37 <p>Information published.</p> 2.0 2026-10-17T01:08:14 <p>Information published.</p> 4.0 2026-11-01T14:47:17 <p>Information published.</p> 3.0 2026-10-28T01:46:10 <p>Information published.</p> Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart Mariner Go Yes CVE-2026-94440 Allocation of Resources Without Limits or Throttling 21857-17084 21809-17084 22292-17084 22293-17084 21857-17084 21809-17084 22292-17084 22293-17084 Important 21857-17084 Important 21809-17084 Important 22292-17084 Important 22293-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21857-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21809-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22292-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22293-17084 Release Notes 21857-17084 21809-17084 22292-17084 22293-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 21809-17084 22292-17084 22293-17084 Release Notes 1.0 2026-10-11T01:55:23 <p>Information published.</p> 2.0 2026-10-12T15:40:14 <p>Information published.</p> 3.0 2026-11-01T14:52:22 <p>Information published.</p> Checksum bypass for golang.org/fips140 in cmd/go Mariner Go Yes CVE-2026-94444 21857-17084 21809-17084 22292-17084 22293-17084 21857-17084 21809-17084 22292-17084 22293-17084 Important 21857-17084 Important 21809-17084 Important 22292-17084 Important 22293-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21857-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21809-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 22292-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 22293-17084 Release Notes 21857-17084 21809-17084 22292-17084 22293-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 21809-17084 22292-17084 22293-17084 Release Notes 1.0 2026-10-11T01:55:51 <p>Information published.</p> 2.0 2026-10-12T15:41:34 <p>Information published.</p> 3.0 2026-11-01T14:52:31 <p>Information published.</p> Checksum database bypass for golang.org/toolchain in cmd/go Mariner Go Yes CVE-2026-94447 21857-17084 21809-17084 22292-17084 22293-17084 21857-17084 21809-17084 22292-17084 22293-17084 Moderate 21857-17084 Moderate 21809-17084 Moderate 22292-17084 Moderate 22293-17084 7.0 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U 21857-17084 7.0 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U 21809-17084 7.0 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U 22292-17084 7.0 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U 22293-17084 Release Notes 21857-17084 21809-17084 22292-17084 22293-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 21809-17084 22292-17084 22293-17084 Release Notes 1.0 2026-10-11T01:54:29 <p>Information published.</p> 2.0 2026-10-13T02:46:50 <p>Information published.</p> 3.0 2026-11-01T14:52:03 <p>Information published.</p> Reset context tracking on consecutive template expressions in html/template Mariner Go Yes CVE-2026-94448 21857-17084 21809-17084 22292-17084 22293-17084 21857-17084 21809-17084 22292-17084 22293-17084 Moderate 21857-17084 Moderate 21809-17084 Moderate 22292-17084 Moderate 22293-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 21857-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 21809-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 22292-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 22293-17084 Release Notes 21857-17084 21809-17084 22292-17084 22293-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 21809-17084 22292-17084 22293-17084 Release Notes 1.0 2026-10-11T01:56:19 <p>Information published.</p> 2.0 2026-10-13T02:47:46 <p>Information published.</p> 3.0 2026-11-01T14:52:39 <p>Information published.</p> IKEv2 Use-After-Free bug when using IKE-over-TCP Mariner libreswan Yes CVE-2026-94453 Use After Free 22041-17084 22041-17084 Important 22041-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22041-17084 Release Notes 22041-17084 Security Update 4.15-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22041-17084 Release Notes 1.0 2026-10-15T01:08:12 <p>Information published.</p> 3.0 2026-10-30T01:43:54 <p>Information published.</p> 2.0 2026-10-28T14:43:22 <p>Information published.</p> Apache Thrift: Python `TJSONProtocol` has a string length limit that is off by default Mariner apache Yes CVE-2026-94634 Allocation of Resources Without Limits or Throttling 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 2.0 2026-10-10T15:07:28 <p>Information published.</p> 3.0 2026-10-13T02:04:39 <p>Information published.</p> 1.0 2026-10-03T01:07:52 <p>Information published.</p> Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up Mariner apache Yes CVE-2026-94636 Improper Handling of Highly Compressed Data (Data Amplification) 21966-17084 21966-17084 Moderate 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 2.0 2026-10-10T15:04:33 <p>Information published.</p> 3.0 2026-10-13T02:01:52 <p>Information published.</p> 1.0 2026-10-03T01:05:12 <p>Information published.</p> Apache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frame Mariner apache Yes CVE-2026-94637 Improper Handling of Highly Compressed Data (Data Amplification) 21916-17084 21903-17084 21972-17084 22285-17084 21916-17084 21903-17084 21972-17084 22285-17084 Moderate 21916-17084 Moderate 21903-17084 Moderate 21972-17084 Moderate 22285-17084 Release Notes 21916-17084 22285-17084 Security Update 3.15.0.aks0-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21916-17084 22285-17084 Release Notes Release Notes 21903-17084 Security Update 1.31.0-34 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21903-17084 Release Notes Release Notes 21972-17084 Security Update 19.0.4-15 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21972-17084 Release Notes 5.0 2026-10-16T01:50:29 <p>Information published.</p> 1.0 2026-10-07T01:38:12 <p>Information published.</p> 3.0 2026-10-13T02:37:09 <p>Information published.</p> 2.0 2026-10-10T14:48:28 <p>Information published.</p> 4.0 2026-10-14T15:06:30 <p>Information published.</p> 8.0 2026-11-02T01:45:46 <p>Information published.</p> 6.0 2026-10-31T14:44:45 <p>Information published.</p> 7.0 2026-11-01T14:49:29 <p>Information published.</p> Apache Thrift: c_glib generated struct readers have no recursion-depth guard (native stack exhaustion) Mariner apache Yes CVE-2026-94650 Uncontrolled Recursion 21966-17084 21966-17084 Important 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 1.0 2026-10-07T01:49:21 <p>Information published.</p> 2.0 2026-10-10T14:56:35 <p>Information published.</p> 3.0 2026-10-13T01:49:33 <p>Information published.</p> Apache Thrift: C++ `TEvhttpServer` leaks its `RequestContext` when the processor throws before calling back Mariner apache Yes CVE-2026-94652 Missing Release of Memory after Effective Lifetime 21966-17084 21966-17084 Low 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 2.0 2026-10-10T15:05:48 <p>Information published.</p> 3.0 2026-10-13T02:03:03 <p>Information published.</p> 1.0 2026-10-03T01:06:21 <p>Information published.</p> Apache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frame Mariner apache Yes CVE-2026-94654 Loop with Unreachable Exit Condition ('Infinite Loop') 21966-17084 21966-17084 Important 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 3.0 2026-10-10T15:30:00 <p>Information published.</p> 2.0 2026-10-05T15:24:25 <p>Information published.</p> 4.0 2026-10-13T02:32:36 <p>Information published.</p> 1.0 2026-10-04T01:02:52 <p>Information published.</p> Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound Mariner apache Yes CVE-2026-94656 Allocation of Resources Without Limits or Throttling 21966-17084 21966-17084 Important 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 3.0 2026-10-10T15:28:38 <p>Information published.</p> 2.0 2026-10-05T15:23:21 <p>Information published.</p> 4.0 2026-10-13T02:30:00 <p>Information published.</p> 1.0 2026-10-04T01:02:05 <p>Information published.</p> NGINX ngx_http_v3_module vulnerability Mariner f5 Yes CVE-2026-95101 Encoding Error 22054-17084 22054-17084 Moderate 22054-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 22054-17084 Release Notes 22054-17084 Security Update 1.30.6-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22054-17084 Release Notes 1.0 2026-10-17T01:07:43 <p>Information published.</p> 3.0 2026-11-02T01:48:12 <p>Information published.</p> 2.0 2026-11-01T14:49:17 <p>Information published.</p> Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_buffer utility and strip_ini_cache() Mariner mitre Yes CVE-2026-95124 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 22051-17084 22051-17084 Important 22051-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22051-17084 Release Notes 22051-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22051-17084 Release Notes 1.0 2026-10-17T01:06:49 <p>Information published.</p> Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS). Mariner mitre Yes CVE-2026-95184 Uncontrolled Resource Consumption 22025-17084 22025-17084 Important 22025-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22025-17084 Release Notes 22025-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22025-17084 Release Notes 1.0 2026-10-11T01:54:02 <p>Information published.</p> 2.0 2026-10-13T02:46:07 <p>Information published.</p> An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS). Mariner mitre Yes CVE-2026-95209 Uncontrolled Resource Consumption 22025-17084 22025-17084 Important 22025-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22025-17084 Release Notes 22025-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22025-17084 Release Notes 1.0 2026-10-11T01:52:51 <p>Information published.</p> 2.0 2026-10-13T02:45:42 <p>Information published.</p> Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions. Mariner mitre Yes CVE-2026-95210 Improper Certificate Validation 22025-17084 22025-17084 Low 22025-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 22025-17084 Release Notes 22025-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22025-17084 Release Notes 1.0 2026-10-11T01:53:09 <p>Information published.</p> 2.0 2026-10-12T15:36:13 <p>Information published.</p> Freetype: freetype: denial of service via repeated subroutine allocations in cid font loader Mariner redhat Yes CVE-2026-95512 Uncontrolled Resource Consumption 21098-17084 22314-17084 21098-17084 22314-17084 Moderate 21098-17084 Moderate 22314-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21098-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22314-17084 Release Notes 21098-17084 22314-17084 Security Update 2.13.2-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21098-17084 22314-17084 Release Notes 1.0 2026-10-11T01:51:16 <p>Information published.</p> 3.0 2026-10-16T01:51:47 <p>Information published.</p> 2.0 2026-10-13T02:44:58 <p>Information published.</p> 4.0 2026-10-17T01:48:33 <p>Information published.</p> 5.0 2026-11-01T14:51:47 <p>Information published.</p> containerd: Unpack DoS via repeated opaque whiteouts Mariner GitHub_M Yes CVE-2026-95838 Uncontrolled Resource Consumption 21913-17084 21908-17084 21915-17084 21916-17084 21807-17084 22281-17084 22283-17084 22285-17084 22055-17084 21913-17084 21908-17084 21915-17084 21916-17084 21807-17084 22281-17084 22283-17084 22285-17084 22055-17084 Moderate 21913-17084 Low 21908-17084 Low 21915-17084 Low 21916-17084 Low 21807-17084 Moderate 22281-17084 Low 22283-17084 Low 22285-17084 Low 22055-17084 Release Notes 21913-17084 22281-17084 Security Update 1.7.7-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21913-17084 22281-17084 Release Notes Release Notes 21908-17084 Security Update 2.3.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21908-17084 Release Notes Release Notes 21915-17084 21916-17084 21807-17084 22283-17084 22285-17084 22055-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21915-17084 21916-17084 21807-17084 22283-17084 22285-17084 22055-17084 Release Notes 1.0 2026-10-14T02:55:04 <p>Information published.</p> 2.0 2026-10-15T01:06:28 <p>Information published.</p> 6.0 2026-11-02T01:47:14 <p>Information published.</p> 5.0 2026-11-01T14:45:46 <p>Information published.</p> 3.0 2026-10-24T14:48:15 <p>Information published.</p> 4.0 2026-10-31T14:46:35 <p>Information published.</p> Apache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exception Mariner apache Yes CVE-2026-96277 Uncaught Exception 21966-17084 21966-17084 Important 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 3.0 2026-10-10T15:28:15 <p>Information published.</p> 2.0 2026-10-05T15:23:00 <p>Information published.</p> 4.0 2026-10-13T02:29:38 <p>Information published.</p> 1.0 2026-10-04T01:01:50 <p>Information published.</p> Apache Thrift: Perl servers end `serve()` when serving one connection fails Mariner apache Yes CVE-2026-96286 Uncaught Exception 21966-17084 21966-17084 Important 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 3.0 2026-10-10T15:27:53 <p>Information published.</p> 2.0 2026-10-05T15:22:40 <p>Information published.</p> 4.0 2026-10-13T02:29:14 <p>Information published.</p> 1.0 2026-10-04T01:01:33 <p>Information published.</p> Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic) Mariner apache Yes CVE-2026-96287 Inefficient Algorithmic Complexity 21966-17084 21966-17084 Important 21966-17084 Release Notes 21966-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21966-17084 Release Notes 3.0 2026-10-10T15:30:25 <p>Information published.</p> 2.0 2026-10-05T15:24:46 <p>Information published.</p> 4.0 2026-10-13T02:33:00 <p>Information published.</p> 1.0 2026-10-04T01:03:08 <p>Information published.</p> Named may terminate unexpectedly when a redirect zone is used with strict QNAME minimization Mariner isc Yes CVE-2026-96888 NULL Pointer Dereference 21677-17084 22331-17084 21677-17084 22331-17084 Important 21677-17084 Important 22331-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21677-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22331-17084 Release Notes 21677-17084 22331-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21677-17084 22331-17084 Release Notes 1.0 2026-10-30T01:02:32 <p>Information published.</p> 2.0 2026-11-01T14:59:09 <p>Information published.</p> Recognize yield as regexp preceder keyword in html/template Mariner Go Yes CVE-2026-97030 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 21857-17084 21809-17084 22292-17084 22293-17084 21857-17084 21809-17084 22292-17084 22293-17084 Moderate 21857-17084 Moderate 21809-17084 Moderate 22292-17084 Moderate 22293-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 21857-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 21809-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22292-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22293-17084 Release Notes 21857-17084 21809-17084 22292-17084 22293-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 21809-17084 22292-17084 22293-17084 Release Notes 1.0 2026-10-16T01:01:46 <p>Information published.</p> 2.0 2026-10-16T14:43:28 <p>Information published.</p> 3.0 2026-10-17T01:02:27 <p>Information published.</p> 4.0 2026-10-22T01:09:52 <p>Information published.</p> 6.0 2026-11-01T14:48:20 <p>Information published.</p> 5.0 2026-10-28T01:45:26 <p>Information published.</p> Reject malformed ECH outer extension references in crypto/tls Mariner Go Yes CVE-2026-97031 Asymmetric Resource Consumption (Amplification) 21857-17084 21809-17084 22292-17084 22293-17084 21857-17084 21809-17084 22292-17084 22293-17084 Important 21857-17084 Important 21809-17084 Important 22292-17084 Important 22293-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21857-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21809-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22292-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22293-17084 Release Notes 21857-17084 21809-17084 22292-17084 22293-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 21809-17084 22292-17084 22293-17084 Release Notes 1.0 2026-10-11T01:56:46 <p>Information published.</p> 2.0 2026-10-12T15:42:51 <p>Information published.</p> 3.0 2026-11-01T14:54:31 <p>Information published.</p> HTTP/2 server crash due to HPACK encoder race in net/http Mariner Go Yes CVE-2026-97032 22015-17084 21923-17084 21925-17084 21926-17084 21908-17084 21901-17084 21921-17084 21910-17084 21911-17084 21771-17084 21912-17084 22017-17084 22018-17084 21899-17084 22019-17084 21915-17084 21916-17084 21904-17084 21927-17084 21893-17084 21902-17084 22020-17084 21913-17084 21807-17084 21928-17084 21772-17084 21894-17084 21914-17084 22021-17084 22022-17084 21929-17084 21903-17084 21972-17084 21857-17084 21809-17084 22119-22078 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22292-17084 22293-17084 22266-17084 22015-17084 21923-17084 21925-17084 21926-17084 21908-17084 21901-17084 21921-17084 21910-17084 21911-17084 21771-17084 21912-17084 22017-17084 22018-17084 21899-17084 22019-17084 21915-17084 21916-17084 21904-17084 21927-17084 21893-17084 21902-17084 22020-17084 21913-17084 21807-17084 21928-17084 21772-17084 21894-17084 21914-17084 22021-17084 22022-17084 21929-17084 21903-17084 21972-17084 21857-17084 21809-17084 22119-22078 22283-17084 22285-17084 22289-17084 22281-17084 22055-17084 22292-17084 22293-17084 22266-17084 Moderate 22015-17084 Moderate 21923-17084 Moderate 21925-17084 Moderate 21926-17084 Moderate 21908-17084 Moderate 21901-17084 Moderate 21921-17084 Moderate 21910-17084 Moderate 21911-17084 Moderate 21771-17084 Moderate 21912-17084 Moderate 22017-17084 Moderate 22018-17084 Moderate 21899-17084 Moderate 22019-17084 Moderate 21915-17084 Moderate 21916-17084 Moderate 21904-17084 Moderate 21927-17084 Moderate 21893-17084 Moderate 21902-17084 Moderate 22020-17084 Moderate 21913-17084 Moderate 21807-17084 Moderate 21928-17084 Moderate 21772-17084 Moderate 21894-17084 Moderate 21914-17084 Moderate 22021-17084 Moderate 22022-17084 Moderate 21929-17084 Moderate 21903-17084 Moderate 21972-17084 Important 21857-17084 Important 21809-17084 Important 22119-22078 Moderate 22283-17084 Moderate 22285-17084 Moderate 22289-17084 Moderate 22281-17084 Moderate 22055-17084 Important 22292-17084 Important 22293-17084 Important 22266-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22015-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21923-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21925-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21926-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21908-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21901-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21921-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21910-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21911-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21771-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21912-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22017-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22018-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21899-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22019-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21915-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21916-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21904-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21927-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21893-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21902-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22020-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21913-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21807-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21928-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21772-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21894-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21914-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22021-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22022-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21929-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21903-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21972-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21857-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21809-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22119-22078 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22283-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22285-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22289-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22281-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22055-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22292-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22293-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22266-17084 Release Notes 22015-17084 Security Update 1.7.7-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22015-17084 Release Notes Release Notes 21923-17084 Security Update 1.7.0-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21923-17084 Release Notes Release Notes 21925-17084 Security Update 1.12.15-15 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21925-17084 Release Notes Release Notes 21926-17084 Security Update 0.5.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21926-17084 Release Notes Release Notes 21908-17084 Security Update 2.3.7-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21908-17084 Release Notes Release Notes 21901-17084 Security Update 1.62.0-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21901-17084 Release Notes Release Notes 21921-17084 Security Update 1.11.4-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21921-17084 Release Notes Release Notes 21910-17084 Security Update 0.14.0-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21910-17084 Release Notes Release Notes 21911-17084 Security Update 2.27.0-16 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21911-17084 Release Notes Release Notes 21771-17084 Security Update 3.5.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21771-17084 Release Notes Release Notes 21912-17084 Security Update 0.24.2-34 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21912-17084 Release Notes Release Notes 22017-17084 Security Update 2.102.0-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22017-17084 Release Notes Release Notes 22018-17084 Security Update 3.6.1-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22018-17084 Release Notes Release Notes 21899-17084 Security Update 2.7.5-22 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21899-17084 Release Notes Release Notes 22019-17084 Security Update 3.10.182-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22019-17084 Release Notes Release Notes 21915-17084 22283-17084 Security Update 4.1.0.kata1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21915-17084 22283-17084 Release Notes Release Notes 21916-17084 22285-17084 Security Update 3.15.0.aks0-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21916-17084 22285-17084 Release Notes Release Notes 21904-17084 Security Update 2.14.1-22 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21904-17084 Release Notes Release Notes 21927-17084 Security Update 0.0.10-11 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21927-17084 Release Notes Release Notes 21893-17084 22289-17084 Security Update 1.30.10-32 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21893-17084 22289-17084 Release Notes Release Notes 21902-17084 Security Update 1.8.4-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21902-17084 Release Notes Release Notes 22020-17084 Security Update 1.15.0-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22020-17084 Release Notes Release Notes 21913-17084 22281-17084 Security Update 1.7.7-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21913-17084 22281-17084 Release Notes Release Notes 21807-17084 21857-17084 21809-17084 22119-22078 22055-17084 22292-17084 22293-17084 22266-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 21857-17084 21809-17084 22119-22078 22055-17084 22292-17084 22293-17084 22266-17084 Release Notes Release Notes 21928-17084 Security Update 4.0.2-12 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21928-17084 Release Notes Release Notes 21772-17084 Security Update 0.63.0-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21772-17084 Release Notes Release Notes 21894-17084 Security Update 1.9.5-23 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21894-17084 Release Notes Release Notes 21914-17084 Security Update 0.12.0-12 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21914-17084 Release Notes Release Notes 22021-17084 Security Update 1.7.0-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22021-17084 Release Notes Release Notes 22022-17084 Security Update 0.8.2-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22022-17084 Release Notes Release Notes 21929-17084 Security Update 1.14.4-14 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21929-17084 Release Notes Release Notes 21903-17084 Security Update 1.31.0-35 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21903-17084 Release Notes Release Notes 21972-17084 Security Update 19.0.4-15 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21972-17084 Release Notes 1.0 2026-10-11T01:40:33 <p>Information published.</p> 4.0 2026-10-16T01:01:49 <p>Information published.</p> 10.0 2026-10-18T01:46:30 <p>Information published.</p> 14.0 2026-10-24T01:46:12 <p>Information published.</p> 12.0 2026-10-21T01:43:35 <p>Information published.</p> 6.0 2026-10-16T14:43:34 <p>Information published.</p> 7.0 2026-10-17T01:02:49 <p>Information published.</p> 13.0 2026-10-22T01:10:47 <p>Information published.</p> 5.0 2026-10-16T01:49:46 <p>Information published.</p> 2.0 2026-10-13T02:38:39 <p>Information published.</p> 3.0 2026-10-14T15:18:53 <p>Information published.</p> 8.0 2026-10-17T01:44:41 <p>Information published.</p> 9.0 2026-10-17T14:47:00 <p>Information published.</p> 11.0 2026-10-18T14:43:03 <p>Information published.</p> 22.0 2026-11-02T01:46:46 <p>Information published.</p> 16.0 2026-10-25T01:46:32 <p>Information published.</p> 18.0 2026-10-28T01:45:38 <p>Information published.</p> 15.0 2026-10-24T14:47:59 <p>Information published.</p> 20.0 2026-10-31T14:46:02 <p>Information published.</p> 21.0 2026-11-01T14:59:16 <p>Information published.</p> 17.0 2026-10-26T01:03:43 <p>Information published.</p> 19.0 2026-10-31T01:03:24 <p>Information published.</p> Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net Mariner Go Yes CVE-2026-97045 22338-17084 22339-17084 22298-17084 22307-17084 22300-17084 22302-17084 22340-17084 22341-17084 22329-17084 22343-17084 22289-17084 22321-17084 22305-17084 22344-17084 22345-17084 22015-17084 21475-17084 22270-17084 22338-17084 22339-17084 22298-17084 22307-17084 22300-17084 22302-17084 22340-17084 22341-17084 22329-17084 22343-17084 22289-17084 22321-17084 22305-17084 22344-17084 22345-17084 22015-17084 21475-17084 22270-17084 Moderate 22338-17084 Moderate 22339-17084 Moderate 22298-17084 Moderate 22307-17084 Moderate 22300-17084 Moderate 22302-17084 Moderate 22340-17084 Moderate 22341-17084 Moderate 22329-17084 Moderate 22343-17084 Moderate 22289-17084 Moderate 22321-17084 Moderate 22305-17084 Moderate 22344-17084 Moderate 22345-17084 Moderate 22015-17084 Moderate 21475-17084 Moderate 22270-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22338-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22339-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22298-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22307-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22300-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22302-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22340-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22341-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22329-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22343-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22289-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22321-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22305-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22344-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22345-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22015-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 21475-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22270-17084 Release Notes 22338-17084 22339-17084 22298-17084 22307-17084 22300-17084 22302-17084 22340-17084 22341-17084 22329-17084 22343-17084 22289-17084 22321-17084 22305-17084 22344-17084 22345-17084 22015-17084 21475-17084 22270-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22338-17084 22339-17084 22298-17084 22307-17084 22300-17084 22302-17084 22340-17084 22341-17084 22329-17084 22343-17084 22289-17084 22321-17084 22305-17084 22344-17084 22345-17084 22015-17084 21475-17084 22270-17084 Release Notes 4.0 2026-11-04T01:49:12 <p>Information published.</p> 2.0 2026-11-01T15:02:08 <p>Information published.</p> 3.0 2026-11-03T14:45:49 <p>Information published.</p> 1.0 2026-10-31T01:07:49 <p>Information published.</p> NGINX ngx_http_core_module vulnerability Mariner f5 Yes CVE-2026-97205 Use After Free 22054-17084 22054-17084 Moderate 22054-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 22054-17084 Release Notes 22054-17084 Security Update 1.30.6-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22054-17084 Release Notes 1.0 2026-10-17T01:07:32 <p>Information published.</p> 2.0 2026-10-22T01:11:09 <p>Information published.</p> 4.0 2026-11-02T01:48:05 <p>Information published.</p> 3.0 2026-11-01T14:49:08 <p>Information published.</p> DNS-over-QUIC (DoQ) path-migration can lead to use-after-free on multi-threaded deployments. Mariner NLnet Labs Yes CVE-2026-97206 Use After Free 22210-17084 22210-17084 Important 22210-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22210-17084 Release Notes 22210-17084 Security Update 1.26.2-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22210-17084 Release Notes 2.0 2026-10-23T01:01:40 <p>Information published.</p> 1.0 2026-10-22T01:11:13 <p>Information published.</p> 3.0 2026-10-24T01:44:21 <p>Information published.</p> 4.0 2026-10-25T01:47:49 <p>Information published.</p> Integer Overflow or Wraparound in GitLab Mariner GitLab Yes CVE-2026-97229 Integer Overflow or Wraparound 0-22078 21905-17084 0-22078 21905-17084 Critical 0-22078 Critical 21905-17084 10.0 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 0-22078 10.0 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 21905-17084 Release Notes 0-22078 Security Update 0:3.4.12-38.azl4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-22078 Release Notes Release Notes 21905-17084 Security Update 3.3.13-0 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21905-17084 Release Notes 3.0 2026-10-27T01:03:44 <p>Information published.</p> 5.0 2026-10-28T01:45:55 <p>Information published.</p> 2.1 2026-10-26T14:50:33 <p>Information published.</p> 2.0 2026-10-25T14:44:53 <p>Information published.</p> 1.0 2026-10-25T01:02:21 <p>Information published.</p> 4.0 2026-10-27T01:46:08 <p>Information published.</p> Specific RPZ configurations and query patterns may result in an unexpected exit Mariner isc Yes CVE-2026-97313 Reachable Assertion 21677-17084 22331-17084 21677-17084 22331-17084 Important 21677-17084 Important 22331-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21677-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22331-17084 Release Notes 21677-17084 22331-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21677-17084 22331-17084 Release Notes 1.0 2026-10-30T01:02:36 <p>Information published.</p> 2.0 2026-11-01T14:59:20 <p>Information published.</p> NGINX ngx_http_ssl_module vulnerability Mariner f5 Yes CVE-2026-97629 Use of Uninitialized Resource 22054-17084 22054-17084 Important 22054-17084 6.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N 22054-17084 Release Notes 22054-17084 Security Update 1.30.6-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22054-17084 Release Notes 1.0 2026-10-17T01:07:59 <p>Information published.</p> 3.0 2026-11-02T01:48:19 <p>Information published.</p> 2.0 2026-11-01T14:49:27 <p>Information published.</p> Pre-boot RCE in EDK II PXE driver Mariner TianoCore Yes CVE-2026-97631 Buffer Copy without Checking Size of Input 22351-17084 21818-17084 21780-17084 22351-17084 21818-17084 21780-17084 Important 22351-17084 Important 21818-17084 Critical 21780-17084 Release Notes 22351-17084 21818-17084 21780-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22351-17084 21818-17084 21780-17084 Release Notes 3.0 2026-11-04T01:50:00 <p>Information published.</p> 2.0 2026-11-01T15:05:13 <p>Information published.</p> 1.0 2026-10-31T01:12:37 <p>Information published.</p> smb: client: fix server->total_read for compound encrypted PDUs Mariner Linux Yes CVE-2026-98167 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:12:39 <p>Information published.</p> 3.0 2026-10-15T02:50:37 <p>Information published.</p> 4.0 2026-10-21T18:41:41 <p>Information published.</p> 1.0 2026-10-07T01:10:19 <p>Information published.</p> smb: client: fix reparse buffer bounds in cifs_query_reparse_point() Mariner Linux Yes CVE-2026-98168 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:10:45 <p>Information published.</p> 2.0 2026-10-21T18:41:43 <p>Information published.</p> 3.0 2026-10-24T14:46:48 <p>Information published.</p> smb: client: fix potential OOB read in smb3_enum_snapshots() Mariner Linux Yes CVE-2026-98169 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:00:35 <p>Information published.</p> 3.0 2026-10-15T02:45:40 <p>Information published.</p> 4.0 2026-10-21T18:41:45 <p>Information published.</p> 1.0 2026-10-07T01:07:26 <p>Information published.</p> smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() Mariner Linux Yes CVE-2026-98170 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:41:47 <p>Information published.</p> 1.0 2026-10-07T01:04:25 <p>Information published.</p> 3.0 2026-11-01T14:45:06 <p>Information published.</p> smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Mariner Linux Yes CVE-2026-98171 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T16:19:52 <p>Information published.</p> 4.0 2026-10-21T18:41:50 <p>Information published.</p> 1.0 2026-10-07T01:37:22 <p>Information published.</p> 3.0 2026-10-15T01:54:36 <p>Information published.</p> smb: client: fix smbd_connection leak on cifs_get_tcp_session() error Mariner Linux Yes CVE-2026-98172 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:34:09 <p>Information published.</p> 3.0 2026-10-15T02:59:37 <p>Information published.</p> 4.0 2026-10-21T18:41:52 <p>Information published.</p> 1.0 2026-10-07T01:20:36 <p>Information published.</p> smb: client: fix use-after-free of iface in cifs_try_adding_channels() Mariner Linux Yes CVE-2026-98173 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:41:54 <p>Information published.</p> 1.0 2026-10-07T01:27:06 <p>Information published.</p> 3.0 2026-11-01T14:46:11 <p>Information published.</p> smb: client: fix rlist race and missing initialization Mariner Linux Yes CVE-2026-98174 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:18:24 <p>Information published.</p> 2.0 2026-10-21T18:41:56 <p>Information published.</p> 4.0 2026-11-02T01:45:39 <p>Information published.</p> 3.0 2026-10-24T14:46:52 <p>Information published.</p> smb: client: cancel reconnect work in clean_demultiplex_info() Mariner Linux Yes CVE-2026-98175 21932-17084 21932-17084 Important 21932-17084 8.1 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:21:39 <p>Information published.</p> 3.0 2026-10-15T02:53:52 <p>Information published.</p> 4.0 2026-10-21T18:41:59 <p>Information published.</p> 1.0 2026-10-07T01:14:32 <p>Information published.</p> drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc Mariner Linux Yes CVE-2026-98176 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:01 <p>Information published.</p> 1.0 2026-10-07T01:44:47 <p>Information published.</p> 3.0 2026-11-01T14:47:17 <p>Information published.</p> drm/amdkfd: Avoid integer underflow in EOP ring size calculation. Mariner Linux Yes CVE-2026-98177 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:03:28 <p>Information published.</p> 2.0 2026-10-21T18:42:03 <p>Information published.</p> 3.0 2026-11-01T14:48:16 <p>Information published.</p> drm/amdgpu: fix rmmio iounmap skipped on device removal Mariner Linux Yes CVE-2026-98179 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:23:39 <p>Information published.</p> 2.0 2026-10-21T18:42:05 <p>Information published.</p> 3.0 2026-11-01T14:49:13 <p>Information published.</p> drm/msm: RCU-free the scheduler-containing ring and VM objects Mariner Linux Yes CVE-2026-98180 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:08 <p>Information published.</p> 1.0 2026-10-07T01:22:47 <p>Information published.</p> 3.0 2026-11-01T14:46:01 <p>Information published.</p> drm/gud: fix out-of-bounds write in gud_plane_atomic_check() Mariner Linux Yes CVE-2026-98181 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:20:15 <p>Information published.</p> 2.0 2026-10-13T17:36:20 <p>Information published.</p> 4.0 2026-10-21T18:42:11 <p>Information published.</p> 3.0 2026-10-15T02:28:47 <p>Information published.</p> wifi: mac80211: refuse to make a monitor active when it has no queue Mariner Linux Yes CVE-2026-98182 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:09:04 <p>Information published.</p> 2.0 2026-10-21T18:42:13 <p>Information published.</p> 3.0 2026-11-01T14:48:26 <p>Information published.</p> wifi: mwifiex: validate scan response extents Mariner Linux Yes CVE-2026-98185 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:21:02 <p>Information published.</p> 2.0 2026-10-13T17:39:23 <p>Information published.</p> 4.0 2026-10-21T18:42:17 <p>Information published.</p> 3.0 2026-10-15T02:30:26 <p>Information published.</p> wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length Mariner Linux Yes CVE-2026-98186 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:44:04 <p>Information published.</p> 3.0 2026-10-15T03:04:10 <p>Information published.</p> 4.0 2026-10-21T18:42:19 <p>Information published.</p> 1.0 2026-10-07T01:25:52 <p>Information published.</p> wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST Mariner Linux Yes CVE-2026-98187 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:14:01 <p>Information published.</p> 2.0 2026-10-13T17:22:01 <p>Information published.</p> 4.0 2026-10-21T18:42:21 <p>Information published.</p> 3.0 2026-10-15T02:20:56 <p>Information published.</p> wifi: p54: validate curve data length in the calibration curve converters Mariner Linux Yes CVE-2026-98188 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:02:01 <p>Information published.</p> 3.0 2026-10-15T02:46:18 <p>Information published.</p> 4.0 2026-10-21T18:42:23 <p>Information published.</p> 1.0 2026-10-07T01:07:49 <p>Information published.</p> wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() Mariner Linux Yes CVE-2026-98189 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:39:43 <p>Information published.</p> 3.0 2026-10-15T03:02:08 <p>Information published.</p> 4.0 2026-10-21T18:42:26 <p>Information published.</p> 1.0 2026-10-07T01:23:38 <p>Information published.</p> wifi: wilc1000: fix out-of-bounds read in P2P public action frames Mariner Linux Yes CVE-2026-98190 21932-17084 21932-17084 Important 21932-17084 8.2 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:20:18 <p>Information published.</p> 3.0 2026-10-15T02:53:12 <p>Information published.</p> 4.0 2026-10-21T18:42:28 <p>Information published.</p> 1.0 2026-10-07T01:14:06 <p>Information published.</p> wifi: wlcore: release runtime PM ref on regdomain config failure Mariner Linux Yes CVE-2026-98191 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:29:00 <p>Information published.</p> 2.0 2026-10-13T18:01:14 <p>Information published.</p> 4.0 2026-10-21T18:42:30 <p>Information published.</p> 3.0 2026-10-15T02:43:28 <p>Information published.</p> wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown Mariner Linux Yes CVE-2026-98192 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:33 <p>Information published.</p> 1.0 2026-10-07T01:37:46 <p>Information published.</p> 3.0 2026-11-01T14:46:38 <p>Information published.</p> wifi: libipw: reject TKIP frames without a full MIC Mariner Linux Yes CVE-2026-98193 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:35 <p>Information published.</p> 1.0 2026-10-07T01:29:43 <p>Information published.</p> 3.0 2026-11-01T14:46:20 <p>Information published.</p> wifi: libertas_tf: fix UAF in lbtf_free_adapter() Mariner Linux Yes CVE-2026-98194 21932-17084 21932-17084 Important 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T17:53:13 <p>Information published.</p> 3.0 2026-10-15T02:41:52 <p>Information published.</p> 4.0 2026-10-21T18:42:37 <p>Information published.</p> 1.0 2026-10-07T01:04:53 <p>Information published.</p> wifi: iwlegacy: fix broadcast stations deallocation Mariner Linux Yes CVE-2026-98195 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T14:53:28 <p>Information published.</p> 3.0 2026-10-15T03:07:40 <p>Information published.</p> 4.0 2026-10-21T18:42:39 <p>Information published.</p> 1.0 2026-10-07T01:31:00 <p>Information published.</p> wifi: brcmsmac: fix UAF in brcms_free_timer() Mariner Linux Yes CVE-2026-98196 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T22:23:54 <p>Information published.</p> 3.0 2026-10-23T01:16:31 <p>Information published.</p> 2.0 2026-10-21T18:42:41 <p>Information published.</p> 5.0 2026-11-02T01:46:28 <p>Information published.</p> 4.0 2026-10-24T14:44:55 <p>Information published.</p> hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove Mariner Linux Yes CVE-2026-98197 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T15:12:12 <p>Information published.</p> 4.0 2026-10-21T18:42:43 <p>Information published.</p> 1.0 2026-10-07T01:35:40 <p>Information published.</p> 3.0 2026-10-15T01:51:37 <p>Information published.</p> hwmon: (pwm-fan) Stop RPM timer before freeing tach data Mariner Linux Yes CVE-2026-98198 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:45 <p>Information published.</p> 1.0 2026-10-07T01:33:10 <p>Information published.</p> 3.0 2026-11-01T14:46:25 <p>Information published.</p> hwmon: (pmbus/core) increase number of phases and add new mask Mariner Linux Yes CVE-2026-98199 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:02:59 <p>Information published.</p> 2.0 2026-10-13T16:49:49 <p>Information published.</p> 4.0 2026-10-21T18:42:49 <p>Information published.</p> 3.0 2026-10-15T02:05:03 <p>Information published.</p> hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() Mariner Linux Yes CVE-2026-98200 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:32:39 <p>Information published.</p> 2.0 2026-10-13T14:45:21 <p>Information published.</p> 3.0 2026-10-15T03:05:48 <p>Information published.</p> 1.0 2026-10-07T01:27:59 <p>Information published.</p> Input: zero ff_effect before compat copy in input_ff_effect_from_user Mariner Linux Yes CVE-2026-98201 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:32:42 <p>Information published.</p> 2.0 2026-10-13T14:59:42 <p>Information published.</p> 1.0 2026-10-07T01:32:42 <p>Information published.</p> 3.0 2026-10-15T01:46:25 <p>Information published.</p> Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Mariner Linux Yes CVE-2026-98202 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:32:44 <p>Information published.</p> 1.0 2026-10-07T01:26:51 <p>Information published.</p> 2.0 2026-10-13T17:55:22 <p>Information published.</p> 3.0 2026-10-15T02:40:01 <p>Information published.</p> Input: soc_button_array - check btns_desc->package.count Mariner Linux Yes CVE-2026-98203 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:32:47 <p>Information published.</p> 1.0 2026-10-07T01:16:22 <p>Information published.</p> 2.0 2026-10-13T17:25:29 <p>Information published.</p> 3.0 2026-10-15T02:22:35 <p>Information published.</p> Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() Mariner Linux Yes CVE-2026-98204 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:32:50 <p>Information published.</p> 2.0 2026-10-13T16:29:19 <p>Information published.</p> 1.0 2026-10-07T01:39:53 <p>Information published.</p> 3.0 2026-10-15T01:57:24 <p>Information published.</p> Input: evdev - zero absinfo before partial copy in EVIOCSABS Mariner Linux Yes CVE-2026-98205 21932-17084 21932-17084 Moderate 21932-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:44:41 <p>Information published.</p> 4.0 2026-10-21T18:32:52 <p>Information published.</p> 3.0 2026-10-15T03:04:40 <p>Information published.</p> 1.0 2026-10-07T01:26:16 <p>Information published.</p> Input: cyttsp5 - clamp the HID report size before memcpy Mariner Linux Yes CVE-2026-98206 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:32:55 <p>Information published.</p> 1.0 2026-10-07T01:11:10 <p>Information published.</p> 2.0 2026-10-13T17:11:56 <p>Information published.</p> 3.0 2026-10-15T02:15:34 <p>Information published.</p> mmc: spi: reset bytes_xfered before retrying CRC failures Mariner Linux Yes CVE-2026-98207 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:03:28 <p>Information published.</p> 4.0 2026-10-21T18:32:57 <p>Information published.</p> 3.0 2026-10-15T02:46:59 <p>Information published.</p> 1.0 2026-10-07T01:08:13 <p>Information published.</p> mmc: sdio_uart: fix xmit_fifo leak when the port table is full Mariner Linux Yes CVE-2026-98208 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:33:00 <p>Information published.</p> 2.0 2026-10-13T16:33:17 <p>Information published.</p> 1.0 2026-10-07T01:40:43 <p>Information published.</p> 3.0 2026-10-15T01:58:20 <p>Information published.</p> mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Mariner Linux Yes CVE-2026-98209 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:33:03 <p>Information published.</p> 1.0 2026-10-07T01:04:26 <p>Information published.</p> 2.0 2026-10-13T16:53:07 <p>Information published.</p> 3.0 2026-10-15T02:06:37 <p>Information published.</p> mmc: mxcmmc: cancel data work and watchdog on remove Mariner Linux Yes CVE-2026-98210 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:33:05 <p>Information published.</p> 2.0 2026-10-13T16:36:33 <p>Information published.</p> 1.0 2026-10-07T01:41:35 <p>Information published.</p> 3.0 2026-10-15T01:59:10 <p>Information published.</p> mmc: mmci: Fix use-after-free in busy-timeout work Mariner Linux Yes CVE-2026-98211 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:33:07 <p>Information published.</p> 1.0 2026-10-07T01:34:00 <p>Information published.</p> 3.0 2026-11-01T14:46:30 <p>Information published.</p> mmc: hsq: Fix use-after-free in retry work Mariner Linux Yes CVE-2026-98212 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:33:10 <p>Information published.</p> 1.0 2026-10-07T01:22:25 <p>Information published.</p> 2.0 2026-10-13T17:42:07 <p>Information published.</p> 3.0 2026-10-15T02:32:08 <p>Information published.</p> mmc: core: Cancel SDIO IRQ work before freeing host Mariner Linux Yes CVE-2026-98213 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:36:22 <p>Information published.</p> 4.0 2026-10-21T18:33:12 <p>Information published.</p> 3.0 2026-10-15T03:00:38 <p>Information published.</p> 1.0 2026-10-07T01:21:28 <p>Information published.</p> selinux: recheck intermediate backing files on mprotect() Mariner Linux Yes CVE-2026-98214 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:29:24 <p>Information published.</p> 2.0 2026-10-13T18:02:41 <p>Information published.</p> 3.0 2026-10-15T02:44:16 <p>Information published.</p> selinux: preserve user SID across nested backing files Mariner Linux Yes CVE-2026-98215 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T16:42:12 <p>Information published.</p> 1.0 2026-10-07T01:46:08 <p>Information published.</p> 3.0 2026-10-15T02:01:40 <p>Information published.</p> IB/hfi1: Fix the PIO_CRED credit-return mmap Mariner Linux Yes CVE-2026-98216 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:45:51 <p>Information published.</p> 4.0 2026-10-21T18:33:14 <p>Information published.</p> 3.0 2026-10-15T03:05:26 <p>Information published.</p> 1.0 2026-10-07T01:27:32 <p>Information published.</p> IB/mlx4: Fix use-after-free on pkey sysfs registration failure Mariner Linux Yes CVE-2026-98217 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:24:41 <p>Information published.</p> 4.0 2026-10-21T18:33:17 <p>Information published.</p> 3.0 2026-10-15T02:55:04 <p>Information published.</p> 1.0 2026-10-07T01:16:17 <p>Information published.</p> i2c: atr: fix dangling adapter pointer on add failure Mariner Linux Yes CVE-2026-98218 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:33:20 <p>Information published.</p> 2.0 2026-10-13T15:05:37 <p>Information published.</p> 1.0 2026-10-07T01:34:49 <p>Information published.</p> 3.0 2026-10-15T01:49:33 <p>Information published.</p> KEYS: trusted: Fix tpm2_load_cmd() boundary check Mariner Linux Yes CVE-2026-98221 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T17:56:10 <p>Information published.</p> 4.0 2026-10-21T18:33:22 <p>Information published.</p> 3.0 2026-10-15T02:43:32 <p>Information published.</p> 1.0 2026-10-07T01:06:12 <p>Information published.</p> KEYS: encrypted: fix integer overflow of datablob_len Mariner Linux Yes CVE-2026-98222 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:33:25 <p>Information published.</p> 1.0 2026-10-07T01:18:58 <p>Information published.</p> 3.0 2026-11-01T14:45:48 <p>Information published.</p> memstick: ms_block: destroy io_queue workqueue on removal Mariner Linux Yes CVE-2026-98227 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:33:36 <p>Information published.</p> 1.0 2026-10-07T01:05:24 <p>Information published.</p> 2.0 2026-10-13T16:54:38 <p>Information published.</p> 3.0 2026-10-15T02:07:27 <p>Information published.</p> xfrm: save input state data before secpath resets Mariner Linux Yes CVE-2026-98229 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:33:41 <p>Information published.</p> 1.0 2026-10-07T01:13:41 <p>Information published.</p> 3.0 2026-11-01T14:45:29 <p>Information published.</p> xfrm: serialize state GC with device state flush Mariner Linux Yes CVE-2026-98231 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:33:46 <p>Information published.</p> 1.0 2026-10-07T01:08:39 <p>Information published.</p> 2.0 2026-10-13T17:08:45 <p>Information published.</p> 3.0 2026-10-15T02:13:59 <p>Information published.</p> scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() Mariner Linux Yes CVE-2026-98232 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T17:54:39 <p>Information published.</p> 4.0 2026-10-21T18:33:48 <p>Information published.</p> 3.0 2026-10-15T02:42:42 <p>Information published.</p> 1.0 2026-10-07T01:05:22 <p>Information published.</p> net/packet: clear RX owner on VNET header error Mariner Linux Yes CVE-2026-98233 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:33:51 <p>Information published.</p> 2.0 2026-10-13T16:26:09 <p>Information published.</p> 1.0 2026-10-07T01:38:34 <p>Information published.</p> 3.0 2026-10-15T01:56:34 <p>Information published.</p> net/sched: hhf: cap hh_flows_limit at change time Mariner Linux Yes CVE-2026-98234 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:35:14 <p>Information published.</p> 4.0 2026-10-21T18:33:54 <p>Information published.</p> 3.0 2026-10-15T03:00:08 <p>Information published.</p> 1.0 2026-10-07T01:21:01 <p>Information published.</p> net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value Mariner Linux Yes CVE-2026-98236 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:34:07 <p>Information published.</p> 2.0 2026-10-13T16:22:58 <p>Information published.</p> 1.0 2026-10-07T01:38:10 <p>Information published.</p> 3.0 2026-10-15T01:55:37 <p>Information published.</p> net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain Mariner Linux Yes CVE-2026-98237 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:38:38 <p>Information published.</p> 4.0 2026-10-21T18:34:10 <p>Information published.</p> 3.0 2026-10-15T03:01:38 <p>Information published.</p> 1.0 2026-10-07T01:23:11 <p>Information published.</p> net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() Mariner Linux Yes CVE-2026-98238 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:34:12 <p>Information published.</p> 2.0 2026-10-13T15:15:20 <p>Information published.</p> 1.0 2026-10-07T01:36:06 <p>Information published.</p> 3.0 2026-10-15T01:52:36 <p>Information published.</p> net: lan743x: fix RX checksum use-after-free Mariner Linux Yes CVE-2026-98239 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:34:15 <p>Information published.</p> 2.0 2026-10-13T16:45:23 <p>Information published.</p> 1.0 2026-10-07T01:47:34 <p>Information published.</p> 3.0 2026-10-15T02:03:21 <p>Information published.</p> ipv6: xfrm: use full sockets in local error paths Mariner Linux Yes CVE-2026-98241 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:40:52 <p>Information published.</p> 4.0 2026-10-21T18:34:19 <p>Information published.</p> 3.0 2026-10-15T03:02:39 <p>Information published.</p> 1.0 2026-10-07T01:25:03 <p>Information published.</p> btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() Mariner Linux Yes CVE-2026-98245 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:34:24 <p>Information published.</p> 1.0 2026-10-07T01:05:47 <p>Information published.</p> 3.0 2026-11-01T14:45:10 <p>Information published.</p> Bluetooth: hci_sync: Serialize local codec list cleanup Mariner Linux Yes CVE-2026-98246 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:34:27 <p>Information published.</p> 1.0 2026-10-07T01:25:14 <p>Information published.</p> 2.0 2026-10-13T17:48:19 <p>Information published.</p> 3.0 2026-10-15T02:36:37 <p>Information published.</p> Bluetooth: hci_codec: validate vendor codec count length Mariner Linux Yes CVE-2026-98247 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:34:29 <p>Information published.</p> 2.0 2026-10-13T15:09:00 <p>Information published.</p> 1.0 2026-10-07T01:35:16 <p>Information published.</p> 3.0 2026-10-15T01:50:35 <p>Information published.</p> arm64: percpu: Fix LSE operations on {8,16}-bit types Mariner Linux Yes CVE-2026-98248 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:34:32 <p>Information published.</p> 1.0 2026-10-07T01:09:30 <p>Information published.</p> 3.0 2026-11-01T14:48:30 <p>Information published.</p> arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc Mariner Linux Yes CVE-2026-98249 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:34:34 <p>Information published.</p> 1.0 2026-10-07T01:27:44 <p>Information published.</p> 2.0 2026-10-13T17:56:55 <p>Information published.</p> 3.0 2026-10-15T02:40:50 <p>Information published.</p> openvswitch: avoid reallocating confirmed conntrack labels Mariner Linux Yes CVE-2026-98251 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:34:38 <p>Information published.</p> 1.0 2026-10-07T01:12:27 <p>Information published.</p> 2.0 2026-10-13T17:16:40 <p>Information published.</p> 3.0 2026-10-15T02:18:05 <p>Information published.</p> RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() Mariner Linux Yes CVE-2026-98252 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:34:41 <p>Information published.</p> 1.0 2026-10-07T01:01:58 <p>Information published.</p> 2.0 2026-10-13T16:48:23 <p>Information published.</p> 3.0 2026-10-15T02:04:12 <p>Information published.</p> RDMA/ucma: Serialize join and leave on copy_to_user failure Mariner Linux Yes CVE-2026-98253 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:34:43 <p>Information published.</p> 1.0 2026-10-07T01:14:49 <p>Information published.</p> 2.0 2026-10-13T17:23:43 <p>Information published.</p> 3.0 2026-10-15T02:21:43 <p>Information published.</p> swiotlb: use the adjusted address for the highmem page lookup Mariner Linux Yes CVE-2026-98254 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:34:46 <p>Information published.</p> 1.0 2026-10-07T01:02:29 <p>Information published.</p> 3.0 2026-11-01T14:47:22 <p>Information published.</p> tcp: exclude old ACKs from tcp fast path Mariner Linux Yes CVE-2026-98255 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:34:48 <p>Information published.</p> 1.0 2026-10-07T01:12:51 <p>Information published.</p> 2.0 2026-10-13T17:18:48 <p>Information published.</p> 3.0 2026-10-15T02:18:55 <p>Information published.</p> rds: ib: use rds_conn_drop() on protocol version mismatch Mariner Linux Yes CVE-2026-98257 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:34:55 <p>Information published.</p> 1.0 2026-10-07T01:24:02 <p>Information published.</p> 2.0 2026-10-13T17:44:53 <p>Information published.</p> 3.0 2026-10-15T02:34:52 <p>Information published.</p> exec: Cleanup POSIX timers right after de_thread() Mariner Linux Yes CVE-2026-98260 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:18:28 <p>Information published.</p> 4.0 2026-10-21T18:35:12 <p>Information published.</p> 3.0 2026-10-15T02:52:35 <p>Information published.</p> 1.0 2026-10-07T01:12:00 <p>Information published.</p> cifs: Fix server use-after-free in cifs_chan_skip_or_disable() Mariner Linux Yes CVE-2026-98261 21932-17084 21932-17084 Important 21932-17084 8.1 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:10:38 <p>Information published.</p> 4.0 2026-10-21T18:35:14 <p>Information published.</p> 3.0 2026-10-15T02:49:54 <p>Information published.</p> 1.0 2026-10-07T01:09:52 <p>Information published.</p> ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY Mariner Linux Yes CVE-2026-98262 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:35:18 <p>Information published.</p> 1.0 2026-10-07T01:18:00 <p>Information published.</p> 2.0 2026-10-13T17:30:22 <p>Information published.</p> 3.0 2026-10-15T02:25:17 <p>Information published.</p> ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type Mariner Linux Yes CVE-2026-98263 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:06:34 <p>Information published.</p> 4.0 2026-10-21T18:35:24 <p>Information published.</p> 3.0 2026-10-15T02:48:37 <p>Information published.</p> 1.0 2026-10-07T01:09:03 <p>Information published.</p> ALSA: virtio: reset device before deleting virtqueues Mariner Linux Yes CVE-2026-98264 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:29:57 <p>Information published.</p> 4.0 2026-10-21T18:35:29 <p>Information published.</p> 3.0 2026-10-15T02:57:39 <p>Information published.</p> 1.0 2026-10-07T01:18:34 <p>Information published.</p> ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity Mariner Linux Yes CVE-2026-98265 21932-17084 21932-17084 Moderate 21932-17084 4.3 4.0 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:30:39 <p>Information published.</p> 2.0 2026-10-24T14:46:57 <p>Information published.</p> ALSA: core: Fix potential UAF after asynchronous card release Mariner Linux Yes CVE-2026-98266 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:35:34 <p>Information published.</p> 1.0 2026-10-07T01:43:59 <p>Information published.</p> 3.0 2026-11-01T14:47:12 <p>Information published.</p> btrfs: abort transaction on failure to update inode for hole punching and reflinking Mariner Linux Yes CVE-2026-98269 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:35:40 <p>Information published.</p> 1.0 2026-10-07T01:28:35 <p>Information published.</p> 2.0 2026-10-13T17:59:51 <p>Information published.</p> 3.0 2026-10-15T02:42:38 <p>Information published.</p> drm/amdgpu: check ras and obj before dereference Mariner Linux Yes CVE-2026-98270 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:35:43 <p>Information published.</p> 1.0 2026-10-07T01:21:25 <p>Information published.</p> 2.0 2026-10-13T17:40:43 <p>Information published.</p> 3.0 2026-10-15T02:31:16 <p>Information published.</p> net: skbuff: do not leave stale header offsets after pskb_carve() Mariner Linux Yes CVE-2026-98271 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U 21932-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:35:49 <p>Information published.</p> 1.0 2026-10-07T01:15:58 <p>Information published.</p> 3.0 2026-11-01T14:48:56 <p>Information published.</p> net: mvpp2: prevent buffer overflow in page_pool allocation Mariner Linux Yes CVE-2026-98272 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:36:28 <p>Information published.</p> 1.0 2026-10-07T01:31:05 <p>Information published.</p> 2.0 2026-10-13T18:07:38 <p>Information published.</p> 3.0 2026-10-15T02:46:16 <p>Information published.</p> x86/kprobes: Fix crash when probing CS CALL instructions Mariner Linux Yes CVE-2026-98273 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:36:31 <p>Information published.</p> 1.0 2026-10-07T01:13:15 <p>Information published.</p> 3.0 2026-11-01T14:48:41 <p>Information published.</p> net: ethernet: cortina: Ack RX overrun interrupt correctly Mariner Linux Yes CVE-2026-98275 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:36:39 <p>Information published.</p> 1.0 2026-10-07T01:11:39 <p>Information published.</p> 2.0 2026-10-13T17:13:27 <p>Information published.</p> 3.0 2026-10-15T02:16:24 <p>Information published.</p> net: lock the socket in sock_gettstamp() Mariner Linux Yes CVE-2026-98276 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:36:42 <p>Information published.</p> 1.0 2026-10-07T01:06:14 <p>Information published.</p> 2.0 2026-10-13T16:57:42 <p>Information published.</p> 3.0 2026-10-15T02:09:05 <p>Information published.</p> btrfs: handle lack of space when cleaning up verity items Mariner Linux Yes CVE-2026-98279 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:36:50 <p>Information published.</p> 1.0 2026-10-07T01:41:08 <p>Information published.</p> 3.0 2026-11-01T14:46:53 <p>Information published.</p> powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba Mariner Linux Yes CVE-2026-98282 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:37:00 <p>Information published.</p> 1.0 2026-10-07T01:17:13 <p>Information published.</p> 2.0 2026-10-13T17:28:47 <p>Information published.</p> 3.0 2026-10-15T02:24:23 <p>Information published.</p> KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() Mariner Linux Yes CVE-2026-98283 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:37:04 <p>Information published.</p> 1.0 2026-10-07T01:13:38 <p>Information published.</p> 2.0 2026-10-13T17:20:21 <p>Information published.</p> 3.0 2026-10-15T02:19:44 <p>Information published.</p> netlink: do not free nlk->groups while lockless readers can use it Mariner Linux Yes CVE-2026-98284 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:37:07 <p>Information published.</p> 1.0 2026-10-07T01:15:32 <p>Information published.</p> 3.0 2026-11-01T14:48:51 <p>Information published.</p> net: bridge: vlan: fix bugs caused by switchdev deletion errors Mariner Linux Yes CVE-2026-98285 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:37:10 <p>Information published.</p> 1.0 2026-10-07T01:28:52 <p>Information published.</p> 3.0 2026-11-01T14:46:15 <p>Information published.</p> drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown Mariner Linux Yes CVE-2026-98286 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:37:12 <p>Information published.</p> 1.0 2026-10-07T01:12:25 <p>Information published.</p> 3.0 2026-11-01T14:45:20 <p>Information published.</p> pppoatm: ensure a writable skb header and linear data Mariner Linux Yes CVE-2026-98287 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:37:15 <p>Information published.</p> 1.0 2026-10-07T01:07:28 <p>Information published.</p> 2.0 2026-10-13T17:03:02 <p>Information published.</p> 3.0 2026-10-15T02:11:31 <p>Information published.</p> net: stmmac: fix TSO header length truncation Mariner Linux Yes CVE-2026-98288 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:37:19 <p>Information published.</p> 1.0 2026-10-07T01:27:17 <p>Information published.</p> 3.0 2026-11-01T14:49:18 <p>Information published.</p> af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). Mariner Linux Yes CVE-2026-98289 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:37:21 <p>Information published.</p> 1.0 2026-10-07T01:40:18 <p>Information published.</p> 3.0 2026-10-24T14:46:43 <p>Information published.</p> Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup Mariner Linux Yes CVE-2026-98290 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:37:25 <p>Information published.</p> 2.0 2026-10-13T14:46:50 <p>Information published.</p> 3.0 2026-10-15T03:06:10 <p>Information published.</p> 1.0 2026-10-07T01:28:27 <p>Information published.</p> Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access Mariner Linux Yes CVE-2026-98292 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:37:31 <p>Information published.</p> 1.0 2026-10-07T01:13:14 <p>Information published.</p> 3.0 2026-11-01T14:45:24 <p>Information published.</p> Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() Mariner Linux Yes CVE-2026-98293 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:37:33 <p>Information published.</p> 1.0 2026-10-07T01:19:33 <p>Information published.</p> 2.0 2026-10-13T17:34:55 <p>Information published.</p> 3.0 2026-10-15T02:27:56 <p>Information published.</p> Bluetooth: hci_qca: Do not write to the serial port after it is closed Mariner Linux Yes CVE-2026-98294 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:37:36 <p>Information published.</p> 1.0 2026-10-07T01:11:36 <p>Information published.</p> 3.0 2026-11-01T14:45:15 <p>Information published.</p> Bluetooth: coredump: Quiesce dump work on unregister Mariner Linux Yes CVE-2026-98295 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:38:12 <p>Information published.</p> 1.0 2026-10-07T01:22:49 <p>Information published.</p> 3.0 2026-11-01T14:49:08 <p>Information published.</p> dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() Mariner Linux Yes CVE-2026-98298 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:41:59 <p>Information published.</p> 4.0 2026-10-21T18:38:19 <p>Information published.</p> 3.0 2026-10-15T03:03:40 <p>Information published.</p> 1.0 2026-10-07T01:25:27 <p>Information published.</p> tcp: do not let tcp_rmem be set below 4096 Mariner Linux Yes CVE-2026-98299 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:38:23 <p>Information published.</p> 1.0 2026-10-07T01:06:38 <p>Information published.</p> 2.0 2026-10-13T16:59:12 <p>Information published.</p> 3.0 2026-10-15T02:09:54 <p>Information published.</p> tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). Mariner Linux Yes CVE-2026-98300 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:26:03 <p>Information published.</p> 4.0 2026-10-21T18:38:28 <p>Information published.</p> 3.0 2026-10-15T02:55:43 <p>Information published.</p> 1.0 2026-10-07T01:17:18 <p>Information published.</p> net: bridge: mst: move switchdev call outside rcu Mariner Linux Yes CVE-2026-98301 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:38:31 <p>Information published.</p> 2.0 2026-10-13T16:40:37 <p>Information published.</p> 1.0 2026-10-07T01:45:28 <p>Information published.</p> 3.0 2026-10-15T02:00:52 <p>Information published.</p> net: fddi: skfp: fix NULL deref when setting the MAC address while down Mariner Linux Yes CVE-2026-98302 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:38:34 <p>Information published.</p> 1.0 2026-10-07T01:10:20 <p>Information published.</p> 2.0 2026-10-13T17:10:20 <p>Information published.</p> 3.0 2026-10-15T02:14:47 <p>Information published.</p> ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup Mariner Linux Yes CVE-2026-98303 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:38:39 <p>Information published.</p> 2.0 2026-10-13T14:51:51 <p>Information published.</p> 3.0 2026-10-15T03:07:18 <p>Information published.</p> 1.0 2026-10-07T01:30:33 <p>Information published.</p> net: bcmgenet: restore the hardware filters on open Mariner Linux Yes CVE-2026-98304 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:38:45 <p>Information published.</p> 1.0 2026-10-07T01:17:38 <p>Information published.</p> 3.0 2026-11-01T14:49:00 <p>Information published.</p> seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation Mariner Linux Yes CVE-2026-98306 21932-17084 21932-17084 Moderate 21932-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:38:48 <p>Information published.</p> 2.0 2026-10-13T16:43:51 <p>Information published.</p> 1.0 2026-10-07T01:46:50 <p>Information published.</p> 3.0 2026-10-15T02:02:33 <p>Information published.</p> wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() Mariner Linux Yes CVE-2026-98307 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:38:52 <p>Information published.</p> 1.0 2026-10-07T01:38:59 <p>Information published.</p> 3.0 2026-11-01T14:46:44 <p>Information published.</p> ALSA: hda: trace PCM open only after assigning a stream Mariner Linux Yes CVE-2026-98308 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:38:55 <p>Information published.</p> 1.0 2026-10-07T01:08:15 <p>Information published.</p> 2.0 2026-10-13T17:07:01 <p>Information published.</p> 3.0 2026-10-15T02:13:12 <p>Information published.</p> drm/vc4: Use managed KMS polling to fix UAF on unbind Mariner Linux Yes CVE-2026-98309 21932-17084 21932-17084 Important 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:23:06 <p>Information published.</p> 4.0 2026-10-21T18:38:58 <p>Information published.</p> 3.0 2026-10-15T02:54:27 <p>Information published.</p> 1.0 2026-10-07T01:14:57 <p>Information published.</p> wifi: virt_wifi: don't transfer operstate before register Mariner Linux Yes CVE-2026-98311 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:39:01 <p>Information published.</p> 1.0 2026-10-07T01:26:02 <p>Information published.</p> 2.0 2026-10-13T17:51:43 <p>Information published.</p> 3.0 2026-10-15T02:38:17 <p>Information published.</p> ALSA: 6fire: fix OOB write from device-reported iso length Mariner Linux Yes CVE-2026-98312 21932-17084 21932-17084 Moderate 21932-17084 4.3 4.0 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:39:04 <p>Information published.</p> 1.0 2026-10-07T01:20:39 <p>Information published.</p> 2.0 2026-10-13T17:37:58 <p>Information published.</p> 3.0 2026-10-15T02:29:38 <p>Information published.</p> drm/msm/dp: skip PUSH_IDLE when the link was never enabled Mariner Linux Yes CVE-2026-98313 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:39:06 <p>Information published.</p> 3.0 2026-10-23T01:15:13 <p>Information published.</p> 1.0 2026-10-20T22:24:08 <p>Information published.</p> 4.0 2026-11-01T14:57:59 <p>Information published.</p> ALSA: pcm: set timer->private_data before registering the PCM timer Mariner Linux Yes CVE-2026-98314 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-21T18:39:08 <p>Information published.</p> 1.0 2026-10-07T01:16:48 <p>Information published.</p> 2.0 2026-10-13T17:27:05 <p>Information published.</p> 3.0 2026-10-15T02:23:28 <p>Information published.</p> ALSA: bcd2000: Fix race between rawmidi and disconnect Mariner Linux Yes CVE-2026-98316 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:29:50 <p>Information published.</p> 2.0 2026-10-13T18:04:09 <p>Information published.</p> 3.0 2026-10-15T02:44:57 <p>Information published.</p> 4.0 2026-10-21T18:38:58 <p>Information published.</p> neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. Mariner Linux Yes CVE-2026-98317 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:09:55 <p>Information published.</p> 2.0 2026-10-21T18:39:00 <p>Information published.</p> 3.0 2026-11-01T14:48:35 <p>Information published.</p> drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr Mariner Linux Yes CVE-2026-98319 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:19:10 <p>Information published.</p> 2.0 2026-10-13T17:33:25 <p>Information published.</p> 3.0 2026-10-15T02:27:01 <p>Information published.</p> 4.0 2026-10-21T18:39:05 <p>Information published.</p> netfilter: flowtable: hold reference on ct until flow is released Mariner Linux Yes CVE-2026-98320 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:27:20 <p>Information published.</p> 3.0 2026-10-15T02:56:22 <p>Information published.</p> 1.0 2026-10-07T01:17:44 <p>Information published.</p> 4.0 2026-10-21T18:39:08 <p>Information published.</p> netfilter: nf_nat: unregister and release hooks on error Mariner Linux Yes CVE-2026-98321 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:14:24 <p>Information published.</p> 2.0 2026-10-21T18:39:10 <p>Information published.</p> 3.0 2026-11-01T14:48:46 <p>Information published.</p> netfilter: nft_nat: fully initialise new_addr in netmap setup Mariner Linux Yes CVE-2026-98322 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T14:48:27 <p>Information published.</p> 3.0 2026-10-15T03:06:33 <p>Information published.</p> 1.0 2026-10-07T01:29:18 <p>Information published.</p> 4.0 2026-10-21T18:39:12 <p>Information published.</p> RDMA/siw: Bound fragmented header copies by the remaining length Mariner Linux Yes CVE-2026-98323 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:28:08 <p>Information published.</p> 2.0 2026-10-13T17:58:27 <p>Information published.</p> 3.0 2026-10-15T02:41:43 <p>Information published.</p> 4.0 2026-10-21T18:39:15 <p>Information published.</p> wifi: mac80211: set up the TX info early to fix failure paths Mariner Linux Yes CVE-2026-98325 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T17:59:11 <p>Information published.</p> 3.0 2026-10-15T02:44:59 <p>Information published.</p> 1.0 2026-10-07T01:07:00 <p>Information published.</p> 4.0 2026-10-21T18:39:17 <p>Information published.</p> wifi: mac80211: mesh: release the channel if start fails Mariner Linux Yes CVE-2026-98326 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:23:15 <p>Information published.</p> 2.0 2026-10-13T17:43:26 <p>Information published.</p> 3.0 2026-10-15T02:33:53 <p>Information published.</p> 4.0 2026-10-21T18:39:19 <p>Information published.</p> wifi: mac80211: mesh: reset the CSA state when leaving Mariner Linux Yes CVE-2026-98327 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:41:58 <p>Information published.</p> 2.0 2026-10-21T18:39:21 <p>Information published.</p> 3.0 2026-11-01T14:46:58 <p>Information published.</p> wifi: mac80211: add HE 6 GHz capability in the scan elems len Mariner Linux Yes CVE-2026-98328 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:24:50 <p>Information published.</p> 2.0 2026-10-13T17:46:47 <p>Information published.</p> 3.0 2026-10-15T02:35:45 <p>Information published.</p> 4.0 2026-10-21T18:39:25 <p>Information published.</p> wifi: mac80211: don't allow injecting frames wider than the chanctx Mariner Linux Yes CVE-2026-98329 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-12T21:48:25 <p>Information published.</p> 2.0 2026-10-21T18:39:27 <p>Information published.</p> 3.0 2026-11-01T14:49:04 <p>Information published.</p> wifi: cfg80211: get the wiphy out of a dying network namespace Mariner Linux Yes CVE-2026-98330 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:15:48 <p>Information published.</p> 2.0 2026-10-21T18:39:29 <p>Information published.</p> 3.0 2026-11-01T14:45:37 <p>Information published.</p> wifi: mac80211: unlist vifs when their netdev is unregistered Mariner Linux Yes CVE-2026-98331 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:12:02 <p>Information published.</p> 2.0 2026-10-13T17:15:03 <p>Information published.</p> 3.0 2026-10-15T02:17:15 <p>Information published.</p> 4.0 2026-10-21T18:39:31 <p>Information published.</p> wifi: mac80211: only operate on TDLS peers in the TDLS code Mariner Linux Yes CVE-2026-98332 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:42:52 <p>Information published.</p> 2.0 2026-10-21T18:39:33 <p>Information published.</p> 3.0 2026-11-01T14:47:04 <p>Information published.</p> wifi: mac80211: reset the LED state when ifup fails Mariner Linux Yes CVE-2026-98333 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:19:47 <p>Information published.</p> 2.0 2026-10-21T18:39:35 <p>Information published.</p> 3.0 2026-11-01T14:45:53 <p>Information published.</p> wifi: mac80211: reset state when starting AP fails Mariner Linux Yes CVE-2026-98334 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:16:43 <p>Information published.</p> 2.0 2026-10-21T18:39:38 <p>Information published.</p> 3.0 2026-11-01T14:45:43 <p>Information published.</p> wifi: mac80211: abort chanswitch when leaving a mesh Mariner Linux Yes CVE-2026-98335 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:15:22 <p>Information published.</p> 2.0 2026-10-21T18:39:40 <p>Information published.</p> 3.0 2026-11-01T14:45:33 <p>Information published.</p> wifi: mac80211: don't offload TC setup on AP_VLAN interfaces Mariner Linux Yes CVE-2026-98336 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:07:52 <p>Information published.</p> 2.0 2026-10-13T17:05:14 <p>Information published.</p> 3.0 2026-10-15T02:12:23 <p>Information published.</p> 4.0 2026-10-21T18:39:42 <p>Information published.</p> wifi: mac80211: don't start a ROC while scanning Mariner Linux Yes CVE-2026-98337 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:24:37 <p>Information published.</p> 2.0 2026-10-21T18:39:44 <p>Information published.</p> 3.0 2026-11-01T14:46:06 <p>Information published.</p> wifi: cfg80211: ibss: ref BSS entry for joined event Mariner Linux Yes CVE-2026-98338 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:43:19 <p>Information published.</p> 2.0 2026-10-21T18:39:48 <p>Information published.</p> 3.0 2026-11-01T14:47:08 <p>Information published.</p> wifi: cfg80211: don't filter by BSS type when removing stale entries Mariner Linux Yes CVE-2026-98339 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:33:04 <p>Information published.</p> 3.0 2026-10-15T02:58:55 <p>Information published.</p> 1.0 2026-10-07T01:20:12 <p>Information published.</p> 4.0 2026-10-21T18:39:50 <p>Information published.</p> wifi: cfg80211: only group hidden BSSes with beacon entries Mariner Linux Yes CVE-2026-98340 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T14:58:11 <p>Information published.</p> 3.0 2026-10-15T03:08:45 <p>Information published.</p> 1.0 2026-10-07T01:32:16 <p>Information published.</p> 4.0 2026-10-21T18:39:52 <p>Information published.</p> wifi: cfg80211: don't free driver-owned scan requests Mariner Linux Yes CVE-2026-98341 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:39:23 <p>Information published.</p> 2.0 2026-10-21T18:39:54 <p>Information published.</p> 3.0 2026-11-01T14:46:49 <p>Information published.</p> dmaengine: wait for RCU readers before releasing dma_device Mariner Linux Yes CVE-2026-98342 21932-17084 21932-17084 Important 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:04:55 <p>Information published.</p> 3.0 2026-10-15T02:47:38 <p>Information published.</p> 1.0 2026-10-07T01:08:38 <p>Information published.</p> 4.0 2026-10-21T18:39:57 <p>Information published.</p> dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() Mariner Linux Yes CVE-2026-98343 21932-17084 21932-17084 Important 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:31:20 <p>Information published.</p> 3.0 2026-10-15T02:58:17 <p>Information published.</p> 1.0 2026-10-07T01:19:22 <p>Information published.</p> 4.0 2026-10-21T18:39:59 <p>Information published.</p> dmaengine: Fix device kref underflow in dma_chan_put() Mariner Linux Yes CVE-2026-98344 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T16:38:57 <p>Information published.</p> 1.0 2026-10-07T01:42:23 <p>Information published.</p> 3.0 2026-10-15T02:00:01 <p>Information published.</p> 4.0 2026-10-21T18:40:03 <p>Information published.</p> wifi: cfg80211: check IP header size in cfg80211_classify8021d() Mariner Linux Yes CVE-2026-98345 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T17:57:43 <p>Information published.</p> 3.0 2026-10-15T02:44:22 <p>Information published.</p> 1.0 2026-10-07T01:06:36 <p>Information published.</p> 4.0 2026-10-21T18:40:05 <p>Information published.</p> IB/IPoIB: Avoid restoring OPER_UP after multicast flush Mariner Linux Yes CVE-2026-98347 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:26:27 <p>Information published.</p> 2.0 2026-10-13T17:53:52 <p>Information published.</p> 3.0 2026-10-15T02:39:09 <p>Information published.</p> 4.0 2026-10-21T18:40:09 <p>Information published.</p> wifi: libipw: reject too-short association responses Mariner Linux Yes CVE-2026-98348 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:28:41 <p>Information published.</p> 3.0 2026-10-15T02:57:00 <p>Information published.</p> 1.0 2026-10-07T01:18:10 <p>Information published.</p> 4.0 2026-10-21T18:40:12 <p>Information published.</p> wifi: libipw: reject too-short beacon and probe responses Mariner Linux Yes CVE-2026-98349 21932-17084 21932-17084 Moderate 21932-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:05:47 <p>Information published.</p> 2.0 2026-10-13T16:56:05 <p>Information published.</p> 3.0 2026-10-15T02:08:13 <p>Information published.</p> 4.0 2026-10-21T18:40:14 <p>Information published.</p> wifi: virt_wifi: free skb when disconnected Mariner Linux Yes CVE-2026-98351 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T15:02:41 <p>Information published.</p> 1.0 2026-10-07T01:33:36 <p>Information published.</p> 3.0 2026-10-15T01:48:26 <p>Information published.</p> 4.0 2026-10-21T18:40:20 <p>Information published.</p> RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted Mariner Linux Yes CVE-2026-98352 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T14:55:06 <p>Information published.</p> 3.0 2026-10-15T03:08:02 <p>Information published.</p> 1.0 2026-10-07T01:31:25 <p>Information published.</p> 4.0 2026-10-21T18:40:22 <p>Information published.</p> RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables Mariner Linux Yes CVE-2026-98353 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:34:24 <p>Information published.</p> 2.0 2026-10-24T14:46:38 <p>Information published.</p> RDMA/mad: Fix receive buffer leak when PKey enforcement fails Mariner Linux Yes CVE-2026-98354 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:03:57 <p>Information published.</p> 2.0 2026-10-13T16:51:27 <p>Information published.</p> 3.0 2026-10-15T02:05:50 <p>Information published.</p> 4.0 2026-10-21T18:40:26 <p>Information published.</p> RDMA/rtrs: guard against null kobj name Mariner Linux Yes CVE-2026-98355 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:36:31 <p>Information published.</p> 2.0 2026-10-21T18:40:29 <p>Information published.</p> 3.0 2026-11-01T14:46:34 <p>Information published.</p> IB/isert: wait for deferred control PDU completions before releasing the connection Mariner Linux Yes CVE-2026-98357 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:25:37 <p>Information published.</p> 2.0 2026-10-13T17:50:00 <p>Information published.</p> 3.0 2026-10-15T02:37:27 <p>Information published.</p> 4.0 2026-10-21T18:40:33 <p>Information published.</p> IB/iser: reject a remote invalidation of an unregistered direction Mariner Linux Yes CVE-2026-98358 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:45:16 <p>Information published.</p> 3.0 2026-10-15T03:05:03 <p>Information published.</p> 1.0 2026-10-07T01:26:40 <p>Information published.</p> 4.0 2026-10-21T18:40:35 <p>Information published.</p> RDMA/core: Reject unregistering netdevs in ib_get_eth_speed Mariner Linux Yes CVE-2026-98359 21932-17084 21932-17084 Important 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:18:47 <p>Information published.</p> 2.0 2026-10-13T17:31:55 <p>Information published.</p> 3.0 2026-10-15T02:26:08 <p>Information published.</p> 4.0 2026-10-21T18:40:40 <p>Information published.</p> RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds Mariner Linux Yes CVE-2026-98360 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:37:28 <p>Information published.</p> 3.0 2026-10-15T03:01:06 <p>Information published.</p> 1.0 2026-10-07T01:22:23 <p>Information published.</p> 4.0 2026-10-21T18:40:43 <p>Information published.</p> clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate Mariner Linux Yes CVE-2026-98362 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:14:47 <p>Information published.</p> 3.0 2026-10-15T02:51:15 <p>Information published.</p> 1.0 2026-10-07T01:10:44 <p>Information published.</p> 4.0 2026-10-21T18:40:47 <p>Information published.</p> firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS Mariner Linux Yes CVE-2026-98363 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T15:18:40 <p>Information published.</p> 1.0 2026-10-07T01:36:57 <p>Information published.</p> 3.0 2026-10-15T01:53:36 <p>Information published.</p> 4.0 2026-10-21T18:40:49 <p>Information published.</p> xfrm: hold net_device reference under RCU in bundle creation Mariner Linux Yes CVE-2026-98364 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-07T01:04:55 <p>Information published.</p> 2.0 2026-10-21T18:40:52 <p>Information published.</p> 3.0 2026-11-01T14:48:21 <p>Information published.</p> RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access Mariner Linux Yes CVE-2026-98365 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:30:15 <p>Information published.</p> 2.0 2026-10-13T18:05:44 <p>Information published.</p> 3.0 2026-10-15T02:45:36 <p>Information published.</p> 4.0 2026-10-21T18:40:54 <p>Information published.</p> RDMA/rxe: validate access flags before swapping the MR's PD Mariner Linux Yes CVE-2026-98366 21932-17084 21932-17084 Important 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T14:49:59 <p>Information published.</p> 3.0 2026-10-15T03:06:55 <p>Information published.</p> 1.0 2026-10-07T01:30:08 <p>Information published.</p> 4.0 2026-10-21T18:40:56 <p>Information published.</p> RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept Mariner Linux Yes CVE-2026-98367 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T14:56:36 <p>Information published.</p> 3.0 2026-10-15T03:08:25 <p>Information published.</p> 1.0 2026-10-07T01:31:50 <p>Information published.</p> 4.0 2026-10-21T18:40:59 <p>Information published.</p> esp: downgrade zerocopy managed frags before mutating skb frags Mariner Linux Yes CVE-2026-98368 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-07T01:07:03 <p>Information published.</p> 2.0 2026-10-13T17:00:45 <p>Information published.</p> 3.0 2026-10-15T02:10:43 <p>Information published.</p> 4.0 2026-10-21T18:41:01 <p>Information published.</p> xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() Mariner Linux Yes CVE-2026-98369 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:16:36 <p>Information published.</p> 3.0 2026-10-15T02:51:56 <p>Information published.</p> 1.0 2026-10-07T01:11:09 <p>Information published.</p> 4.0 2026-10-21T18:41:03 <p>Information published.</p> xfrm: fix compat ALLOCSPI request use-after-free Mariner Linux Yes CVE-2026-98370 21932-17084 21932-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T18:08:38 <p>Information published.</p> 3.0 2026-10-15T02:49:15 <p>Information published.</p> 1.0 2026-10-07T01:09:28 <p>Information published.</p> 4.0 2026-10-21T18:41:07 <p>Information published.</p> tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() Mariner Linux Yes CVE-2026-98374 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-13T14:54:02 <p>Information published.</p> 3.0 2026-10-15T02:50:28 <p>Information published.</p> 1.0 2026-10-09T01:04:59 <p>Information published.</p> 4.0 2026-10-21T18:41:17 <p>Information published.</p> xen/netfront: drop RX packets with a short Ethernet header Mariner Linux Yes CVE-2026-98375 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.0 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.0 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 3.0 2026-10-23T01:15:19 <p>Information published.</p> 1.0 2026-10-20T22:23:52 <p>Information published.</p> 2.0 2026-10-21T18:41:20 <p>Information published.</p> 4.0 2026-11-01T14:59:11 <p>Information published.</p> vlan: require the MAC header to be present in __vlan_insert_inner_tag() Mariner Linux Yes CVE-2026-98377 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-10T01:10:00 <p>Information published.</p> 2.0 2026-10-21T18:41:26 <p>Information published.</p> 3.0 2026-11-01T14:51:29 <p>Information published.</p> bpf: Skip unsettled links in link iterator Mariner Linux Yes CVE-2026-98378 21932-17084 21932-17084 Important 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-10T01:11:06 <p>Information published.</p> 3.0 2026-10-15T02:55:18 <p>Information published.</p> 2.0 2026-10-13T17:09:16 <p>Information published.</p> 4.0 2026-10-21T18:41:30 <p>Information published.</p> netfilter: ip6t_rpfilter: reject routes without inet6_dev Mariner Linux Yes CVE-2026-98379 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-10T01:12:53 <p>Information published.</p> 3.0 2026-10-15T02:57:49 <p>Information published.</p> 2.0 2026-10-13T17:15:48 <p>Information published.</p> 4.0 2026-10-21T18:41:32 <p>Information published.</p> net/sched: reject IDR error pointers when deleting actions Mariner Linux Yes CVE-2026-98380 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-10T01:11:47 <p>Information published.</p> 3.0 2026-10-15T02:55:54 <p>Information published.</p> 2.0 2026-10-13T17:10:48 <p>Information published.</p> 4.0 2026-10-21T18:41:35 <p>Information published.</p> veth: manage XDP program pointers during channel resize Mariner Linux Yes CVE-2026-98381 21932-17084 21932-17084 Important 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-10T01:12:10 <p>Information published.</p> 3.0 2026-10-15T02:56:30 <p>Information published.</p> 2.0 2026-10-13T17:12:34 <p>Information published.</p> 4.0 2026-10-21T18:41:39 <p>Information published.</p> bpf: Reject dev-bound-only programs on other devices Mariner Linux Yes CVE-2026-98382 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-10T01:10:44 <p>Information published.</p> 3.0 2026-10-15T02:54:37 <p>Information published.</p> 2.0 2026-10-13T17:07:32 <p>Information published.</p> 4.0 2026-10-21T18:41:41 <p>Information published.</p> bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL Mariner Linux Yes CVE-2026-98383 21932-17084 21932-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-10T01:10:22 <p>Information published.</p> 3.0 2026-10-15T02:53:59 <p>Information published.</p> 2.0 2026-10-13T17:05:51 <p>Information published.</p> 4.0 2026-10-21T18:41:43 <p>Information published.</p> bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() Mariner Linux Yes CVE-2026-98384 21932-17084 21932-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-10T01:12:32 <p>Information published.</p> 3.0 2026-10-15T02:57:07 <p>Information published.</p> 2.0 2026-10-13T17:14:09 <p>Information published.</p> 4.0 2026-10-21T18:41:45 <p>Information published.</p> scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot Mariner Linux Yes CVE-2026-98386 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-16T01:04:36 <p>Information published.</p> 2.0 2026-10-21T18:41:47 <p>Information published.</p> 3.0 2026-11-01T14:47:00 <p>Information published.</p> exec: do_close_on_exec() before taking exec_update_lock Mariner Linux Yes CVE-2026-98388 21932-17084 21932-17084 Low 21932-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:05:31 <p>Information published.</p> 2.0 2026-10-24T14:49:13 <p>Information published.</p> drm/amdgpu: skip gfx switch_power_profile during GPU reset Mariner Linux Yes CVE-2026-98389 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:03:05 <p>Information published.</p> 2.0 2026-10-21T18:41:52 <p>Information published.</p> 4.0 2026-10-28T01:45:12 <p>Information published.</p> 3.0 2026-10-27T14:47:00 <p>Information published.</p> net: ipv4: Fix UDP length overflow with PMTU discover and big MTU Mariner Linux Yes CVE-2026-98393 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-16T01:03:32 <p>Information published.</p> 2.0 2026-10-21T18:42:00 <p>Information published.</p> 3.0 2026-11-01T14:46:35 <p>Information published.</p> af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. Mariner Linux Yes CVE-2026-98394 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-16T01:04:02 <p>Information published.</p> 2.0 2026-10-21T18:42:02 <p>Information published.</p> 3.0 2026-11-01T14:46:46 <p>Information published.</p> net: iptunnel: fix stale transport header during tunnel decapsulation Mariner Linux Yes CVE-2026-98401 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-16T01:04:30 <p>Information published.</p> 2.0 2026-10-21T18:42:13 <p>Information published.</p> 3.0 2026-11-01T14:46:54 <p>Information published.</p> net: icmp: avoid invalid transport header access in icmp_send tracepoint Mariner Linux Yes CVE-2026-98402 21932-17084 21932-17084 Low 21932-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:03:49 <p>Information published.</p> 2.0 2026-10-21T18:42:15 <p>Information published.</p> 3.0 2026-10-24T14:48:23 <p>Information published.</p> drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Mariner Linux Yes CVE-2026-98404 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:05:05 <p>Information published.</p> 2.0 2026-10-21T18:42:19 <p>Information published.</p> 4.0 2026-11-02T01:47:47 <p>Information published.</p> 3.0 2026-10-24T14:48:57 <p>Information published.</p> smb: client: fix missing iov bounds check in parse_posix_sids() Mariner Linux Yes CVE-2026-98405 21932-17084 21932-17084 Moderate 21932-17084 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:04:41 <p>Information published.</p> 2.0 2026-10-21T18:42:22 <p>Information published.</p> 3.0 2026-10-24T14:48:41 <p>Information published.</p> wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver Mariner Linux Yes CVE-2026-98406 21932-17084 21932-17084 Low 21932-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:04:22 <p>Information published.</p> 2.0 2026-10-21T18:42:25 <p>Information published.</p> 4.0 2026-11-02T01:47:31 <p>Information published.</p> 3.0 2026-10-24T14:48:36 <p>Information published.</p> wifi: rsi: fix heap OOB write on key removal Mariner Linux Yes CVE-2026-98407 21932-17084 21932-17084 Moderate 21932-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:03:56 <p>Information published.</p> 2.0 2026-10-21T18:42:28 <p>Information published.</p> 4.0 2026-11-02T01:47:25 <p>Information published.</p> 3.0 2026-10-24T14:48:27 <p>Information published.</p> watchdog: rtd119x: Avoid division by zero Mariner Linux Yes CVE-2026-98409 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:04:58 <p>Information published.</p> 2.0 2026-10-21T18:42:33 <p>Information published.</p> 4.0 2026-11-02T01:47:43 <p>Information published.</p> 3.0 2026-10-24T14:48:53 <p>Information published.</p> selinux: always fill AVC decision in avc_has_perm_noaudit() Mariner Linux Yes CVE-2026-98413 21932-17084 21932-17084 Low 21932-17084 3.6 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:05:46 <p>Information published.</p> 2.0 2026-10-21T18:42:43 <p>Information published.</p> 4.0 2026-11-02T01:48:01 <p>Information published.</p> 3.0 2026-10-24T14:49:18 <p>Information published.</p> drop_monitor: fix out-of-bounds write in reset_per_cpu_data() Mariner Linux Yes CVE-2026-98419 21932-17084 21932-17084 Moderate 21932-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:05:11 <p>Information published.</p> 2.0 2026-10-21T18:42:58 <p>Information published.</p> 4.0 2026-11-02T01:47:51 <p>Information published.</p> 3.0 2026-10-24T14:49:01 <p>Information published.</p> ksmbd: follow SMB2 session expiration semantics Mariner Linux Yes CVE-2026-98420 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 3.0 2026-10-23T01:15:24 <p>Information published.</p> 1.0 2026-10-20T22:24:19 <p>Information published.</p> 2.0 2026-10-21T18:43:00 <p>Information published.</p> 4.0 2026-11-01T14:59:24 <p>Information published.</p> wifi: mac80211: require a peer station for TDLS setup confirm Mariner Linux Yes CVE-2026-98421 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:05:25 <p>Information published.</p> 2.0 2026-10-21T18:43:03 <p>Information published.</p> 4.0 2026-11-02T01:47:57 <p>Information published.</p> 3.0 2026-10-24T14:49:08 <p>Information published.</p> wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown Mariner Linux Yes CVE-2026-98422 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:03:44 <p>Information published.</p> 2.0 2026-10-21T18:43:07 <p>Information published.</p> 4.0 2026-11-02T01:47:21 <p>Information published.</p> 3.0 2026-10-24T14:48:19 <p>Information published.</p> wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping Mariner Linux Yes CVE-2026-98423 21932-17084 21932-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:04:52 <p>Information published.</p> 2.0 2026-10-21T18:43:09 <p>Information published.</p> 4.0 2026-11-02T01:47:38 <p>Information published.</p> 3.0 2026-10-24T14:48:48 <p>Information published.</p> wifi: cfg80211: undo netns switch if renaming the wiphy fails Mariner Linux Yes CVE-2026-98424 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.0 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L 21932-17084 3.0 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-16T01:03:23 <p>Information published.</p> 2.0 2026-10-21T18:43:11 <p>Information published.</p> 3.0 2026-11-01T14:46:30 <p>Information published.</p> wifi: mac80211: don't warn when an IBSS has no channel to scan Mariner Linux Yes CVE-2026-98425 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-16T01:03:14 <p>Information published.</p> 2.0 2026-10-21T18:32:39 <p>Information published.</p> 3.0 2026-11-01T14:46:25 <p>Information published.</p> wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path Mariner Linux Yes CVE-2026-98426 21932-17084 21932-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:04:15 <p>Information published.</p> 2.0 2026-10-21T18:32:41 <p>Information published.</p> 4.0 2026-11-02T01:47:28 <p>Information published.</p> 3.0 2026-10-24T14:48:31 <p>Information published.</p> net/sched: codel: bound the dropping loop per dequeue call Mariner Linux Yes CVE-2026-98427 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-16T01:03:38 <p>Information published.</p> 2.0 2026-10-21T18:32:43 <p>Information published.</p> 3.0 2026-11-01T14:46:40 <p>Information published.</p> RDMA/efa: Keep EQ resources alive while IRQ is registered Mariner Linux Yes CVE-2026-98429 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:04:47 <p>Information published.</p> 2.0 2026-10-21T18:32:49 <p>Information published.</p> 4.0 2026-11-02T01:47:35 <p>Information published.</p> 3.0 2026-10-24T14:48:45 <p>Information published.</p> RDMA/efa: Keep admin queues alive while IRQ is registered Mariner Linux Yes CVE-2026-98430 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:05:17 <p>Information published.</p> 2.0 2026-10-21T18:32:51 <p>Information published.</p> 4.0 2026-11-02T01:47:54 <p>Information published.</p> 3.0 2026-10-24T14:49:05 <p>Information published.</p> ipv4: free inet_opt and ireq_opt after an RCU grace period Mariner Linux Yes CVE-2026-98432 21932-17084 21932-17084 Important 21932-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:07:50 <p>Information published.</p> 4.0 2026-10-21T01:44:10 <p>Information published.</p> 2.0 2026-10-16T14:43:23 <p>Information published.</p> 5.0 2026-10-21T18:32:55 <p>Information published.</p> 3.0 2026-10-18T14:43:44 <p>Information published.</p> net/sched: act_ct: avoid modifying shared unconfirmed ct entry Mariner Linux Yes CVE-2026-98441 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:33:10 <p>Information published.</p> 1.0 2026-10-20T01:09:51 <p>Information published.</p> 3.0 2026-11-01T14:45:44 <p>Information published.</p> net/sched: act_ct: fix helper UAF due to extensions realloc Mariner Linux Yes CVE-2026-98442 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.7 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 21932-17084 7.7 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:41 <p>Information published.</p> 2.0 2026-10-20T14:45:10 <p>Information published.</p> 3.0 2026-10-21T18:33:12 <p>Information published.</p> 4.0 2026-11-01T14:51:53 <p>Information published.</p> xfs: fix cursor and pointer handling when recovering iunlink buckets Mariner Linux Yes CVE-2026-98443 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-20T14:46:54 <p>Information published.</p> 3.0 2026-10-21T18:33:14 <p>Information published.</p> 1.0 2026-10-20T01:03:11 <p>Information published.</p> 4.0 2026-11-01T14:54:15 <p>Information published.</p> smb: client: delete compound mids on send failure before unlock Mariner Linux Yes CVE-2026-98449 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L 21932-17084 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:54 <p>Information published.</p> 2.0 2026-10-21T18:33:27 <p>Information published.</p> 3.0 2026-11-01T14:50:46 <p>Information published.</p> smb: client: close completed creates on compound wait errors Mariner Linux Yes CVE-2026-98450 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L 21932-17084 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:06:46 <p>Information published.</p> 2.0 2026-10-21T18:33:29 <p>Information published.</p> 3.0 2026-11-01T14:51:05 <p>Information published.</p> smb: client: use finish_no_open() for non-regular inodes Mariner Linux Yes CVE-2026-98451 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L 21932-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:36 <p>Information published.</p> 2.0 2026-10-20T14:45:01 <p>Information published.</p> 3.0 2026-10-21T18:33:31 <p>Information published.</p> 4.0 2026-11-01T14:51:47 <p>Information published.</p> smb: client: clean up failed cached directory opens Mariner Linux Yes CVE-2026-98452 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L 21932-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:33:34 <p>Information published.</p> 1.0 2026-10-20T01:09:27 <p>Information published.</p> 3.0 2026-11-01T14:45:34 <p>Information published.</p> smb: client: close handle after create-context parsing failure Mariner Linux Yes CVE-2026-98453 21932-17084 21932-17084 Moderate 21932-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:33:36 <p>Information published.</p> 1.0 2026-10-20T01:01:46 <p>Information published.</p> 3.0 2026-10-24T14:45:48 <p>Information published.</p> smb: client: fix create context out-of-bounds reads Mariner Linux Yes CVE-2026-98454 21932-17084 21932-17084 Moderate 21932-17084 6.3 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:33:38 <p>Information published.</p> 1.0 2026-10-20T01:09:40 <p>Information published.</p> 4.0 2026-11-02T01:52:05 <p>Information published.</p> 3.0 2026-10-24T14:47:39 <p>Information published.</p> Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO Mariner Linux Yes CVE-2026-98455 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:33:41 <p>Information published.</p> 1.0 2026-10-20T01:08:24 <p>Information published.</p> 4.0 2026-11-02T01:51:50 <p>Information published.</p> 3.0 2026-10-24T14:47:07 <p>Information published.</p> Bluetooth: mgmt: fix race in read_unconf_index_list() Mariner Linux Yes CVE-2026-98456 21932-17084 21932-17084 Important 21932-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:02 <p>Information published.</p> 2.0 2026-10-21T18:33:43 <p>Information published.</p> 4.0 2026-11-02T01:49:56 <p>Information published.</p> 3.0 2026-10-24T14:45:07 <p>Information published.</p> Bluetooth: L2CAP: validate frame length before control and FCS access Mariner Linux Yes CVE-2026-98457 21932-17084 21932-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:46 <p>Information published.</p> 2.0 2026-10-21T18:33:45 <p>Information published.</p> 4.0 2026-11-02T01:45:40 <p>Information published.</p> 3.0 2026-10-24T14:49:39 <p>Information published.</p> Bluetooth: ISO: release unused CIS holds after channel attach Mariner Linux Yes CVE-2026-98458 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:42 <p>Information published.</p> 2.0 2026-10-20T14:45:30 <p>Information published.</p> 3.0 2026-10-21T18:33:47 <p>Information published.</p> 4.0 2026-11-01T14:50:37 <p>Information published.</p> Bluetooth: ISO: balance the parent hold in hci_bind_bis() Mariner Linux Yes CVE-2026-98459 21932-17084 21932-17084 Moderate 21932-17084 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:29 <p>Information published.</p> 2.0 2026-10-21T18:33:49 <p>Information published.</p> 3.0 2026-10-24T14:49:32 <p>Information published.</p> Bluetooth: hci_sock: reject out-of-range OCF values Mariner Linux Yes CVE-2026-98460 21932-17084 21932-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:06:49 <p>Information published.</p> 2.0 2026-10-21T18:33:51 <p>Information published.</p> 4.0 2026-11-02T01:52:50 <p>Information published.</p> 3.0 2026-10-24T14:48:55 <p>Information published.</p> Bluetooth: hci_sock: validate event length before filtering Mariner Linux Yes CVE-2026-98461 21932-17084 21932-17084 Moderate 21932-17084 5.2 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:31 <p>Information published.</p> 2.0 2026-10-20T14:45:15 <p>Information published.</p> 3.0 2026-10-21T18:33:53 <p>Information published.</p> 5.0 2026-11-02T01:45:18 <p>Information published.</p> 4.0 2026-10-24T14:49:10 <p>Information published.</p> Bluetooth: hci_conn: fix CIS hold ownership on reuse Mariner Linux Yes CVE-2026-98462 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-24T01:47:25 <p>Information published.</p> 1.0 2026-10-20T01:10:30 <p>Information published.</p> 2.0 2026-10-21T18:34:08 <p>Information published.</p> 5.0 2026-11-02T01:45:59 <p>Information published.</p> 4.0 2026-10-24T14:50:08 <p>Information published.</p> KVM: arm64: Transfer the hyp stack pages out of the host stage-2 Mariner Linux Yes CVE-2026-98466 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 21932-17084 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:34:15 <p>Information published.</p> 1.0 2026-10-20T01:03:03 <p>Information published.</p> 3.0 2026-11-01T14:54:09 <p>Information published.</p> KVM: SEV: Do cache maintenance on the source VM during intra-host migration Mariner Linux Yes CVE-2026-98471 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N 21932-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:06:19 <p>Information published.</p> 2.0 2026-10-21T18:34:24 <p>Information published.</p> 3.0 2026-11-01T14:50:56 <p>Information published.</p> s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Mariner Linux Yes CVE-2026-98473 21932-17084 21932-17084 Low 21932-17084 1.9 1.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:10:11 <p>Information published.</p> 2.0 2026-10-21T18:34:28 <p>Information published.</p> 3.1 2026-10-29T01:43:19 <p>Information published.</p> 3.0 2026-10-24T14:49:59 <p>Information published.</p> s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() Mariner Linux Yes CVE-2026-98476 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-24T01:47:03 <p>Information published.</p> 1.0 2026-10-20T01:01:27 <p>Information published.</p> 2.0 2026-10-21T18:34:34 <p>Information published.</p> 5.0 2026-11-02T01:48:26 <p>Information published.</p> 4.0 2026-10-24T14:49:43 <p>Information published.</p> scsi: libiscsi_tcp: Check the data direction of a Data-In PDU Mariner Linux Yes CVE-2026-98479 21932-17084 21932-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:34:40 <p>Information published.</p> 1.0 2026-10-20T01:09:34 <p>Information published.</p> 4.0 2026-11-02T01:52:02 <p>Information published.</p> 3.0 2026-10-24T14:47:36 <p>Information published.</p> netfilter: nf_tables: skip expired catchall elements on insert and delete Mariner Linux Yes CVE-2026-98484 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L 21932-17084 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:04:08 <p>Information published.</p> 2.0 2026-10-21T18:34:52 <p>Information published.</p> 3.0 2026-11-01T14:50:37 <p>Information published.</p> netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read Mariner Linux Yes CVE-2026-98485 21932-17084 21932-17084 Moderate 21932-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:03:40 <p>Information published.</p> 2.0 2026-10-21T18:34:54 <p>Information published.</p> 4.0 2026-11-02T01:48:52 <p>Information published.</p> 3.0 2026-10-24T14:50:16 <p>Information published.</p> net: ena: fix MMIO read buffer leak on probe failure Mariner Linux Yes CVE-2026-98486 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:10:26 <p>Information published.</p> 2.0 2026-10-20T14:46:11 <p>Information published.</p> 3.0 2026-10-21T18:34:56 <p>Information published.</p> 4.0 2026-11-01T14:51:37 <p>Information published.</p> net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Mariner Linux Yes CVE-2026-98488 21932-17084 21932-17084 Moderate 21932-17084 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:04:49 <p>Information published.</p> 2.0 2026-10-20T14:43:32 <p>Information published.</p> 3.0 2026-10-21T18:35:10 <p>Information published.</p> 5.0 2026-11-02T01:49:06 <p>Information published.</p> 4.0 2026-10-24T14:50:39 <p>Information published.</p> net: atl1c: fix soft lockup on out-of-range tpd_cons read Mariner Linux Yes CVE-2026-98489 21932-17084 21932-17084 Moderate 21932-17084 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:06:00 <p>Information published.</p> 2.0 2026-10-20T14:43:36 <p>Information published.</p> 3.0 2026-10-21T18:35:13 <p>Information published.</p> 5.0 2026-11-02T01:49:13 <p>Information published.</p> 4.0 2026-10-24T14:43:58 <p>Information published.</p> net: openvswitch: conntrack: fix helper UAF due to extensions realloc Mariner Linux Yes CVE-2026-98490 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.7 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 21932-17084 7.7 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:50 <p>Information published.</p> 2.0 2026-10-20T14:45:25 <p>Information published.</p> 3.0 2026-10-21T18:35:16 <p>Information published.</p> 4.0 2026-11-01T14:52:02 <p>Information published.</p> net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry Mariner Linux Yes CVE-2026-98491 21932-17084 21932-17084 Important 21932-17084 7.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:06:34 <p>Information published.</p> 2.0 2026-10-20T14:43:41 <p>Information published.</p> 3.0 2026-10-21T18:35:19 <p>Information published.</p> 5.0 2026-11-02T01:49:19 <p>Information published.</p> 4.0 2026-10-24T14:44:06 <p>Information published.</p> net: ipconfig: bound DHCP option construction Mariner Linux Yes CVE-2026-98493 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:04:16 <p>Information published.</p> 2.0 2026-10-20T14:43:11 <p>Information published.</p> 3.0 2026-10-21T18:35:29 <p>Information published.</p> 4.0 2026-11-01T14:50:42 <p>Information published.</p> net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Mariner Linux Yes CVE-2026-98494 21932-17084 21932-17084 Moderate 21932-17084 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:46 <p>Information published.</p> 2.0 2026-10-20T14:45:59 <p>Information published.</p> 3.0 2026-10-21T18:35:36 <p>Information published.</p> 5.0 2026-11-02T01:50:14 <p>Information published.</p> 4.0 2026-10-24T14:45:36 <p>Information published.</p> net: arp: terminate device name before lookup Mariner Linux Yes CVE-2026-98495 21932-17084 21932-17084 Low 21932-17084 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:16 <p>Information published.</p> 2.0 2026-10-21T18:35:39 <p>Information published.</p> 4.0 2026-11-02T01:45:28 <p>Information published.</p> 3.0 2026-10-24T14:49:24 <p>Information published.</p> net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() Mariner Linux Yes CVE-2026-98498 21932-17084 21932-17084 Moderate 21932-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:29 <p>Information published.</p> 2.0 2026-10-20T14:44:14 <p>Information published.</p> 3.0 2026-10-21T18:36:29 <p>Information published.</p> 5.0 2026-11-02T01:49:30 <p>Information published.</p> 4.0 2026-10-24T14:44:24 <p>Information published.</p> HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() Mariner Linux Yes CVE-2026-98499 21932-17084 21932-17084 Moderate 21932-17084 6.1 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:53 <p>Information published.</p> 2.0 2026-10-21T18:36:32 <p>Information published.</p> 4.0 2026-11-02T01:49:42 <p>Information published.</p> 3.0 2026-10-24T14:44:40 <p>Information published.</p> HID: alps: fix use-after-free on input2 registration failure Mariner Linux Yes CVE-2026-98501 21932-17084 21932-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:31 <p>Information published.</p> 2.0 2026-10-20T14:44:18 <p>Information published.</p> 3.0 2026-10-21T18:36:37 <p>Information published.</p> 5.0 2026-11-02T01:49:33 <p>Information published.</p> 4.0 2026-10-24T14:44:29 <p>Information published.</p> HID: alps: unregister DualPoint Stick input device on remove Mariner Linux Yes CVE-2026-98502 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 2.4 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21932-17084 2.4 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:02:31 <p>Information published.</p> 2.0 2026-10-21T18:36:39 <p>Information published.</p> 3.0 2026-11-01T14:50:04 <p>Information published.</p> packet: use ubuf_info completion for TX_RING packets Mariner Linux Yes CVE-2026-98503 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.0 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H 21932-17084 6.0 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:03:09 <p>Information published.</p> 2.0 2026-10-21T18:36:41 <p>Information published.</p> 3.0 2026-11-01T14:50:13 <p>Information published.</p> mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() Mariner Linux Yes CVE-2026-98505 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:36:47 <p>Information published.</p> 1.0 2026-10-20T01:02:23 <p>Information published.</p> 3.0 2026-11-01T14:53:53 <p>Information published.</p> mm/hugetlb: do not dissolve gigantic pages without runtime support Mariner Linux Yes CVE-2026-98506 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:06:42 <p>Information published.</p> 2.0 2026-10-21T18:36:51 <p>Information published.</p> 3.0 2026-11-01T14:49:09 <p>Information published.</p> mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish Mariner Linux Yes CVE-2026-98507 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:01:54 <p>Information published.</p> 2.0 2026-10-20T14:43:10 <p>Information published.</p> 3.0 2026-10-21T18:36:56 <p>Information published.</p> 4.0 2026-11-01T14:46:54 <p>Information published.</p> drm/virtio: fix NULL pointer dereference on fence allocation failure Mariner Linux Yes CVE-2026-98508 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:42:58 <p>Information published.</p> 3.0 2026-10-21T18:36:59 <p>Information published.</p> 1.0 2026-10-20T01:11:07 <p>Information published.</p> 5.0 2026-11-02T01:52:15 <p>Information published.</p> 4.0 2026-10-24T14:47:53 <p>Information published.</p> drm/virtio: fix memory leak of fence event on execbuffer failure Mariner Linux Yes CVE-2026-98509 21932-17084 21932-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:37:02 <p>Information published.</p> 1.0 2026-10-20T01:07:05 <p>Information published.</p> 4.0 2026-11-02T01:51:33 <p>Information published.</p> 3.0 2026-10-24T14:46:39 <p>Information published.</p> drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() Mariner Linux Yes CVE-2026-98511 21932-17084 21932-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:10:36 <p>Information published.</p> 2.0 2026-10-20T14:46:16 <p>Information published.</p> 3.0 2026-10-21T18:37:08 <p>Information published.</p> 5.0 2026-11-02T01:46:02 <p>Information published.</p> 4.0 2026-10-24T14:50:11 <p>Information published.</p> drm/nouveau: Fix gem reference leak in validate_init() Mariner Linux Yes CVE-2026-98514 21932-17084 21932-17084 Low 21932-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:40 <p>Information published.</p> 2.0 2026-10-21T18:37:18 <p>Information published.</p> 4.0 2026-11-02T01:50:07 <p>Information published.</p> 3.0 2026-10-24T14:45:27 <p>Information published.</p> drm/nouveau: fix double-free in nvif_vmm_dtor Mariner Linux Yes CVE-2026-98515 21932-17084 21932-17084 Moderate 21932-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:06:24 <p>Information published.</p> 2.0 2026-10-20T14:44:02 <p>Information published.</p> 3.0 2026-10-21T18:37:21 <p>Information published.</p> 5.0 2026-11-02T01:52:45 <p>Information published.</p> 4.0 2026-10-24T14:48:51 <p>Information published.</p> drm/nouveau: Fix bridge reference leak in nv1a_ram_new() Mariner Linux Yes CVE-2026-98516 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:40 <p>Information published.</p> 2.0 2026-10-20T14:44:30 <p>Information published.</p> 3.0 2026-10-21T18:37:24 <p>Information published.</p> 5.0 2026-11-02T01:49:39 <p>Information published.</p> 4.0 2026-10-24T14:44:36 <p>Information published.</p> drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM Mariner Linux Yes CVE-2026-98517 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:37:26 <p>Information published.</p> 1.0 2026-10-20T01:07:36 <p>Information published.</p> 3.0 2026-11-01T14:45:14 <p>Information published.</p> drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() Mariner Linux Yes CVE-2026-98519 21932-17084 21932-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:06:53 <p>Information published.</p> 2.0 2026-10-20T14:44:11 <p>Information published.</p> 3.0 2026-10-21T18:37:31 <p>Information published.</p> 5.0 2026-11-02T01:45:06 <p>Information published.</p> 4.0 2026-10-24T14:48:58 <p>Information published.</p> drm/i915: fix incorrect RCU teardown order Mariner Linux Yes CVE-2026-98521 21932-17084 21932-17084 Moderate 21932-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:10:08 <p>Information published.</p> 2.0 2026-10-20T14:45:55 <p>Information published.</p> 3.0 2026-10-21T18:37:33 <p>Information published.</p> 5.0 2026-11-02T01:45:52 <p>Information published.</p> 4.0 2026-10-24T14:49:55 <p>Information published.</p> rds: ib: Clear the sg list when mapping an MR fails Mariner Linux Yes CVE-2026-98524 21932-17084 21932-17084 Important 21932-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:40 <p>Information published.</p> 2.0 2026-10-20T14:45:40 <p>Information published.</p> 3.0 2026-10-21T18:38:17 <p>Information published.</p> 5.0 2026-11-02T01:45:36 <p>Information published.</p> 4.0 2026-10-24T14:49:36 <p>Information published.</p> llc: reserve device headroom for allocated frames Mariner Linux Yes CVE-2026-98526 21932-17084 21932-17084 Important 21932-17084 8.3 8.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:01:45 <p>Information published.</p> 2.0 2026-10-21T18:38:27 <p>Information published.</p> 4.0 2026-11-02T01:48:30 <p>Information published.</p> 3.0 2026-10-24T14:49:48 <p>Information published.</p> gpio: zynq: fix runtime PM leak on request error path Mariner Linux Yes CVE-2026-98527 21932-17084 21932-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:38:29 <p>Information published.</p> 1.0 2026-10-20T01:05:01 <p>Information published.</p> 4.0 2026-11-02T01:51:29 <p>Information published.</p> 3.0 2026-10-24T14:46:32 <p>Information published.</p> ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST Mariner Linux Yes CVE-2026-98531 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:38:37 <p>Information published.</p> 1.0 2026-10-20T01:07:52 <p>Information published.</p> 4.0 2026-11-02T01:51:39 <p>Information published.</p> 3.0 2026-10-24T14:46:48 <p>Information published.</p> ipv6: do not let ipv6_find_hdr() return an offset past the packet end Mariner Linux Yes CVE-2026-98532 21932-17084 21932-17084 Moderate 21932-17084 5.6 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:38:39 <p>Information published.</p> 1.0 2026-10-20T01:02:48 <p>Information published.</p> 4.0 2026-11-02T01:51:12 <p>Information published.</p> 3.0 2026-10-24T14:46:00 <p>Information published.</p> fsl/fman: Fix clk reference leak in read_dts_node() Mariner Linux Yes CVE-2026-98535 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:38:58 <p>Information published.</p> 1.0 2026-10-20T01:09:10 <p>Information published.</p> 4.0 2026-11-02T01:51:55 <p>Information published.</p> 3.0 2026-10-24T14:47:24 <p>Information published.</p> writeback: report a Tasks-RCU quiescent state per cgwb drain pass Mariner Linux Yes CVE-2026-98536 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:34 <p>Information published.</p> 2.0 2026-10-20T14:44:22 <p>Information published.</p> 3.0 2026-10-21T18:39:01 <p>Information published.</p> 5.0 2026-11-02T01:49:36 <p>Information published.</p> 4.0 2026-10-24T14:44:33 <p>Information published.</p> writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes Mariner Linux Yes CVE-2026-98538 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:03:14 <p>Information published.</p> 2.0 2026-10-21T18:39:06 <p>Information published.</p> 4.0 2026-11-02T01:48:43 <p>Information published.</p> 3.0 2026-10-24T14:50:09 <p>Information published.</p> fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT Mariner Linux Yes CVE-2026-98541 21932-17084 21932-17084 Moderate 21932-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:48:40 <p>Information published.</p> 3.0 2026-10-21T18:39:12 <p>Information published.</p> 1.0 2026-10-20T01:10:08 <p>Information published.</p> 5.0 2026-11-02T01:52:08 <p>Information published.</p> 4.0 2026-10-24T14:47:43 <p>Information published.</p> bna: prevent IOC timer rearm during teardown Mariner Linux Yes CVE-2026-98544 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:39:19 <p>Information published.</p> 1.0 2026-10-20T01:03:41 <p>Information published.</p> 3.0 2026-11-01T14:54:35 <p>Information published.</p> ata: libata-scsi: bound the ATA passthru sense descriptor writes Mariner Linux Yes CVE-2026-98545 21932-17084 21932-17084 Moderate 21932-17084 6.8 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:35 <p>Information published.</p> 2.0 2026-10-21T18:39:22 <p>Information published.</p> 3.0 2026-10-24T14:45:22 <p>Information published.</p> af_packet: fix integer overflow in prb_calc_retire_blk_tmo() Mariner Linux Yes CVE-2026-98547 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:03:56 <p>Information published.</p> 2.0 2026-10-21T18:39:27 <p>Information published.</p> 4.0 2026-11-02T01:48:55 <p>Information published.</p> 3.0 2026-10-24T14:50:20 <p>Information published.</p> sctp: discard the rest of the packet on a stale-cookie error Mariner Linux Yes CVE-2026-98548 21932-17084 21932-17084 Important 21932-17084 7.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:04:31 <p>Information published.</p> 2.0 2026-10-20T14:43:20 <p>Information published.</p> 3.0 2026-10-21T18:39:29 <p>Information published.</p> 5.0 2026-11-02T01:48:58 <p>Information published.</p> 4.0 2026-10-24T14:50:32 <p>Information published.</p> tcp: prevent collapsing skbs across boundary in rtx queue Mariner Linux Yes CVE-2026-98549 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21932-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:01:58 <p>Information published.</p> 2.0 2026-10-20T14:43:15 <p>Information published.</p> 3.0 2026-10-21T18:39:31 <p>Information published.</p> 4.0 2026-11-01T14:47:00 <p>Information published.</p> tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow Mariner Linux Yes CVE-2026-98550 21932-17084 21932-17084 Moderate 21932-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:39:34 <p>Information published.</p> 1.0 2026-10-20T01:11:21 <p>Information published.</p> 4.0 2026-11-02T01:52:18 <p>Information published.</p> 3.0 2026-10-24T14:48:01 <p>Information published.</p> perf/core: Fill branch entries with a single assignment Mariner Linux Yes CVE-2026-98551 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:09:10 <p>Information published.</p> 2.0 2026-10-21T18:39:37 <p>Information published.</p> 3.0 2026-11-01T14:51:00 <p>Information published.</p> autofs: fix sbi->pipe file reference leak in autofs_kill_sb() Mariner Linux Yes CVE-2026-98553 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:52 <p>Information published.</p> 2.0 2026-10-20T14:46:07 <p>Information published.</p> 3.0 2026-10-21T18:39:41 <p>Information published.</p> 5.0 2026-11-02T01:50:18 <p>Information published.</p> 4.0 2026-10-24T14:45:39 <p>Information published.</p> vlan: ensure sufficient headroom in vlan_dev_hard_header() Mariner Linux Yes CVE-2026-98554 21932-17084 21932-17084 Moderate 21932-17084 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:43 <p>Information published.</p> 2.0 2026-10-20T14:45:55 <p>Information published.</p> 3.0 2026-10-21T18:39:44 <p>Information published.</p> 5.0 2026-11-02T01:50:11 <p>Information published.</p> 4.0 2026-10-24T14:45:31 <p>Information published.</p> llc: fix skb UAF and leaks on llc_mac_hdr_init() failure Mariner Linux Yes CVE-2026-98555 21932-17084 21932-17084 Moderate 21932-17084 6.4 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:22 <p>Information published.</p> 2.0 2026-10-21T18:39:47 <p>Information published.</p> 4.0 2026-11-02T01:45:32 <p>Information published.</p> 3.0 2026-10-24T14:49:28 <p>Information published.</p> net: flush skb_defer_nodes in dev_cpu_dead() Mariner Linux Yes CVE-2026-98558 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:03:43 <p>Information published.</p> 2.0 2026-10-20T14:43:50 <p>Information published.</p> 3.0 2026-10-21T18:39:52 <p>Information published.</p> 4.0 2026-11-01T14:48:37 <p>Information published.</p> net/smc: fix UAF on lgr list traversal in smcr_port_err() Mariner Linux Yes CVE-2026-98559 21932-17084 21932-17084 Important 21932-17084 7.7 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:10:14 <p>Information published.</p> 2.0 2026-10-20T14:45:59 <p>Information published.</p> 3.0 2026-10-21T18:39:54 <p>Information published.</p> 5.0 2026-11-02T01:45:56 <p>Information published.</p> 4.0 2026-10-24T14:50:03 <p>Information published.</p> nfp: hold IPsec RX state under the XArray lock Mariner Linux Yes CVE-2026-98561 21932-17084 21932-17084 Important 21932-17084 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:18 <p>Information published.</p> 2.0 2026-10-21T18:39:56 <p>Information published.</p> 4.0 2026-11-02T01:49:46 <p>Information published.</p> 3.0 2026-10-24T14:44:51 <p>Information published.</p> net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 Mariner Linux Yes CVE-2026-98565 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:03 <p>Information published.</p> 2.0 2026-10-20T14:44:23 <p>Information published.</p> 3.0 2026-10-21T18:40:06 <p>Information published.</p> 5.0 2026-11-02T01:45:09 <p>Information published.</p> 4.0 2026-10-24T14:49:02 <p>Information published.</p> net: xps: reject an out of range traffic class Mariner Linux Yes CVE-2026-98567 21932-17084 21932-17084 Moderate 21932-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:28 <p>Information published.</p> 2.0 2026-10-21T18:40:11 <p>Information published.</p> 4.0 2026-11-02T01:49:49 <p>Information published.</p> 3.0 2026-10-24T14:44:55 <p>Information published.</p> vxlan: use one headroom snapshot for neighbour replies Mariner Linux Yes CVE-2026-98568 21932-17084 21932-17084 Moderate 21932-17084 6.0 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:04:20 <p>Information published.</p> 2.0 2026-10-21T18:40:13 <p>Information published.</p> 4.0 2026-11-02T01:52:41 <p>Information published.</p> 3.0 2026-10-24T14:48:39 <p>Information published.</p> ip_gre: Reject enabling collect metadata through changelink Mariner Linux Yes CVE-2026-98569 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:48:19 <p>Information published.</p> 3.0 2026-10-21T18:40:16 <p>Information published.</p> 1.0 2026-10-20T01:09:14 <p>Information published.</p> 5.0 2026-11-02T01:51:58 <p>Information published.</p> 4.0 2026-10-24T14:47:28 <p>Information published.</p> net: ipv6: keep room for the mac header in dst_dev_overhead() Mariner Linux Yes CVE-2026-98570 21932-17084 21932-17084 Important 21932-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:40:19 <p>Information published.</p> 1.0 2026-10-20T01:09:04 <p>Information published.</p> 3.0 2026-10-24T14:47:20 <p>Information published.</p> net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() Mariner Linux Yes CVE-2026-98573 21932-17084 21932-17084 Critical 21932-17084 9.4 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:34 <p>Information published.</p> 2.0 2026-10-20T14:45:21 <p>Information published.</p> 3.0 2026-10-21T18:40:26 <p>Information published.</p> 5.0 2026-11-02T01:45:22 <p>Information published.</p> 4.0 2026-10-24T14:49:15 <p>Information published.</p> sctp: hold asoc or transport before mod_timer() in timer handlers Mariner Linux Yes CVE-2026-98586 21932-17084 21932-17084 Moderate 21932-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:03:34 <p>Information published.</p> 2.0 2026-10-21T18:40:58 <p>Information published.</p> 4.0 2026-11-02T01:48:47 <p>Information published.</p> 3.0 2026-10-24T14:50:12 <p>Information published.</p> bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc Mariner Linux Yes CVE-2026-98588 21932-17084 21932-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:41:00 <p>Information published.</p> 1.0 2026-10-20T01:03:50 <p>Information published.</p> 4.0 2026-11-02T01:51:25 <p>Information published.</p> 3.0 2026-10-24T14:46:16 <p>Information published.</p> bpf: Reject pkt arguments in mutating subprogs Mariner Linux Yes CVE-2026-98589 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:41:02 <p>Information published.</p> 1.0 2026-10-20T01:09:59 <p>Information published.</p> 3.0 2026-11-01T14:45:49 <p>Information published.</p> bpf: Fix bpf_sock context code generation Mariner Linux Yes CVE-2026-98590 21932-17084 21932-17084 Moderate 21932-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-24T01:47:07 <p>Information published.</p> 1.0 2026-10-20T01:09:50 <p>Information published.</p> 2.0 2026-10-21T18:41:05 <p>Information published.</p> 5.0 2026-11-02T01:45:43 <p>Information published.</p> 4.0 2026-10-24T14:49:43 <p>Information published.</p> bpf: Fix bounds check for skb-backed dynptrs Mariner Linux Yes CVE-2026-98591 21932-17084 21932-17084 Moderate 21932-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:03:04 <p>Information published.</p> 2.0 2026-10-20T14:43:46 <p>Information published.</p> 3.0 2026-10-21T18:41:08 <p>Information published.</p> 5.0 2026-11-02T01:52:32 <p>Information published.</p> 4.0 2026-10-24T14:48:29 <p>Information published.</p> tg3: clean up PHYLIB resources on probe failure Mariner Linux Yes CVE-2026-98594 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:43 <p>Information published.</p> 2.0 2026-10-20T14:43:37 <p>Information published.</p> 3.0 2026-10-21T18:41:16 <p>Information published.</p> 5.0 2026-11-02T01:52:28 <p>Information published.</p> 4.0 2026-10-24T14:48:24 <p>Information published.</p> net: usb: sr9700: include receive overhead in the length check Mariner Linux Yes CVE-2026-98597 21932-17084 21932-17084 Moderate 21932-17084 6.1 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:04:59 <p>Information published.</p> 2.0 2026-10-21T18:41:23 <p>Information published.</p> 4.0 2026-11-02T01:49:09 <p>Information published.</p> 3.0 2026-10-24T14:50:43 <p>Information published.</p> ipv6: Prevent rt6_insert_exception() for dying fib6_info. Mariner Linux Yes CVE-2026-98598 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:45 <p>Information published.</p> 2.0 2026-10-20T14:45:14 <p>Information published.</p> 3.0 2026-10-21T18:41:27 <p>Information published.</p> 4.0 2026-11-01T14:51:57 <p>Information published.</p> bpf: Reject non-negative offsets in stack_slot_obj_get_spi() Mariner Linux Yes CVE-2026-98599 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:09:53 <p>Information published.</p> 2.0 2026-10-20T14:45:46 <p>Information published.</p> 3.0 2026-10-21T18:41:30 <p>Information published.</p> 4.0 2026-11-01T14:51:10 <p>Information published.</p> Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough Mariner Linux Yes CVE-2026-98602 21932-17084 21932-17084 Important 21932-17084 8.1 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:19 <p>Information published.</p> 2.0 2026-10-20T14:45:40 <p>Information published.</p> 3.0 2026-10-21T18:41:36 <p>Information published.</p> 5.0 2026-11-02T01:50:00 <p>Information published.</p> 4.0 2026-10-24T14:45:15 <p>Information published.</p> drm/virtio: release the GEM object on virtio_gpu_vram_create() errors Mariner Linux Yes CVE-2026-98606 21932-17084 21932-17084 Moderate 21932-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:46:29 <p>Information published.</p> 3.0 2026-10-21T18:41:46 <p>Information published.</p> 1.0 2026-10-20T01:01:54 <p>Information published.</p> 5.0 2026-11-02T01:50:21 <p>Information published.</p> 4.0 2026-10-24T14:45:52 <p>Information published.</p> drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() Mariner Linux Yes CVE-2026-98607 21932-17084 21932-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:21 <p>Information published.</p> 2.0 2026-10-21T18:41:49 <p>Information published.</p> 4.0 2026-11-02T01:48:37 <p>Information published.</p> 3.0 2026-10-24T14:49:55 <p>Information published.</p> drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() Mariner Linux Yes CVE-2026-98608 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:47:54 <p>Information published.</p> 3.0 2026-10-21T18:41:51 <p>Information published.</p> 1.0 2026-10-20T01:08:04 <p>Information published.</p> 5.0 2026-11-02T01:51:44 <p>Information published.</p> 4.0 2026-10-24T14:46:59 <p>Information published.</p> drm/virtio: fix object leak when drm_gem_handle_create() fails Mariner Linux Yes CVE-2026-98609 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:38 <p>Information published.</p> 2.0 2026-10-20T14:45:26 <p>Information published.</p> 3.0 2026-10-21T18:41:53 <p>Information published.</p> 5.0 2026-11-02T01:45:25 <p>Information published.</p> 4.0 2026-10-24T14:49:21 <p>Information published.</p> net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget Mariner Linux Yes CVE-2026-98610 21932-17084 21932-17084 Moderate 21932-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:03:10 <p>Information published.</p> 2.0 2026-10-21T18:41:56 <p>Information published.</p> 4.0 2026-11-02T01:52:36 <p>Information published.</p> 3.0 2026-10-24T14:48:32 <p>Information published.</p> net: usb: catc: bound the RX packet length in catc_rx_done() Mariner Linux Yes CVE-2026-98612 21932-17084 21932-17084 Moderate 21932-17084 6.1 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:06:32 <p>Information published.</p> 2.0 2026-10-21T18:42:01 <p>Information published.</p> 4.0 2026-11-02T01:49:16 <p>Information published.</p> 3.0 2026-10-24T14:44:02 <p>Information published.</p> sctp: avoid livelock while updating retransmit path Mariner Linux Yes CVE-2026-98614 21932-17084 21932-17084 Moderate 21932-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:05 <p>Information published.</p> 2.0 2026-10-21T18:42:05 <p>Information published.</p> 4.0 2026-11-02T01:48:33 <p>Information published.</p> 3.0 2026-10-24T14:49:52 <p>Information published.</p> net: gue: reject invalid REMCSUM offsets Mariner Linux Yes CVE-2026-98621 21932-17084 21932-17084 Critical 21932-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:47:43 <p>Information published.</p> 3.0 2026-10-21T18:42:18 <p>Information published.</p> 1.0 2026-10-20T01:07:39 <p>Information published.</p> 5.0 2026-11-02T01:51:36 <p>Information published.</p> 4.0 2026-10-24T14:46:43 <p>Information published.</p> net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure Mariner Linux Yes CVE-2026-98622 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:04:39 <p>Information published.</p> 2.0 2026-10-20T14:43:28 <p>Information published.</p> 3.0 2026-10-21T18:42:21 <p>Information published.</p> 5.0 2026-11-02T01:49:01 <p>Information published.</p> 4.0 2026-10-24T14:50:35 <p>Information published.</p> drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update Mariner Linux Yes CVE-2026-98623 21932-17084 21932-17084 Moderate 21932-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:58 <p>Information published.</p> 2.0 2026-10-21T18:42:24 <p>Information published.</p> 4.0 2026-11-02T01:48:40 <p>Information published.</p> 3.0 2026-10-24T14:50:00 <p>Information published.</p> netfilter: nfnetlink_queue: hold nfnl mutex in event notifier Mariner Linux Yes CVE-2026-98624 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:01:45 <p>Information published.</p> 2.0 2026-10-20T14:43:06 <p>Information published.</p> 3.0 2026-10-21T18:42:27 <p>Information published.</p> 5.0 2026-11-02T01:52:21 <p>Information published.</p> 4.0 2026-10-24T14:48:05 <p>Information published.</p> netfilter: flowtable: publish HW_DEAD after worker is done Mariner Linux Yes CVE-2026-98625 21932-17084 21932-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:11 <p>Information published.</p> 2.0 2026-10-20T14:44:01 <p>Information published.</p> 3.0 2026-10-21T18:42:29 <p>Information published.</p> 5.0 2026-11-02T01:49:23 <p>Information published.</p> 4.0 2026-10-24T14:44:17 <p>Information published.</p> bpf: Restrict CO-RE poisoning to relocatable instructions Mariner Linux Yes CVE-2026-98626 21932-17084 21932-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:46:58 <p>Information published.</p> 3.0 2026-10-21T18:42:34 <p>Information published.</p> 1.0 2026-10-20T01:03:44 <p>Information published.</p> 5.0 2026-11-02T01:51:21 <p>Information published.</p> 4.0 2026-10-24T14:46:13 <p>Information published.</p> bpf: Make post-verification instruction rewrites killable Mariner Linux Yes CVE-2026-98628 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 2.3 2.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:U 21932-17084 2.3 2.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 3.0 2026-10-24T01:47:21 <p>Information published.</p> 1.0 2026-10-20T01:10:02 <p>Information published.</p> 2.0 2026-10-21T18:42:36 <p>Information published.</p> 4.0 2026-11-01T14:51:21 <p>Information published.</p> net/sched: cls_u32: fix manual hash table handle IDR aliasing Mariner Linux Yes CVE-2026-98629 21932-17084 21932-17084 Low 21932-17084 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:06:49 <p>Information published.</p> 2.0 2026-10-20T14:43:45 <p>Information published.</p> 3.0 2026-10-21T18:42:38 <p>Information published.</p> 4.0 2026-10-24T14:44:09 <p>Information published.</p> xsk: Use a 32-bit compare in xsk_map_gen_lookup Mariner Linux Yes CVE-2026-98631 21932-17084 21932-17084 Moderate 21932-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:13 <p>Information published.</p> 2.0 2026-10-20T14:44:06 <p>Information published.</p> 3.0 2026-10-21T18:42:43 <p>Information published.</p> 5.0 2026-11-02T01:49:27 <p>Information published.</p> 4.0 2026-10-24T14:44:20 <p>Information published.</p> Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel Mariner Linux Yes CVE-2026-98632 21932-17084 21932-17084 Moderate 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:42:45 <p>Information published.</p> 1.0 2026-10-20T01:02:58 <p>Information published.</p> 4.0 2026-11-02T01:51:16 <p>Information published.</p> 3.0 2026-10-24T14:46:04 <p>Information published.</p> scsi: sd_zbc: Reject disks with too many zones Mariner Linux Yes CVE-2026-98634 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.1 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 6.1 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:03:16 <p>Information published.</p> 2.0 2026-10-21T18:42:51 <p>Information published.</p> 3.0 2026-11-01T14:48:18 <p>Information published.</p> squashfs: Add dictionary size range check to prevent shift-out-of-bounds Mariner Linux Yes CVE-2026-98636 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:15 <p>Information published.</p> 2.0 2026-10-20T14:44:32 <p>Information published.</p> 3.0 2026-10-21T18:42:55 <p>Information published.</p> 5.0 2026-11-02T01:45:13 <p>Information published.</p> 4.0 2026-10-24T14:49:06 <p>Information published.</p> HID: amd_sfh: Validate PCI BAR size before mapping Mariner Linux Yes CVE-2026-98640 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-24T01:47:11 <p>Information published.</p> 1.0 2026-10-20T01:09:56 <p>Information published.</p> 2.0 2026-10-21T18:43:06 <p>Information published.</p> 5.0 2026-11-02T01:45:47 <p>Information published.</p> 4.0 2026-10-24T14:49:47 <p>Information published.</p> bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk Mariner Linux Yes CVE-2026-98642 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:07:08 <p>Information published.</p> 2.0 2026-10-21T18:38:56 <p>Information published.</p> 3.0 2026-11-01T14:49:28 <p>Information published.</p> bpf: Fix out-of-bounds read of rtt_min in sock_ops Mariner Linux Yes CVE-2026-98643 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:38:59 <p>Information published.</p> 1.0 2026-10-20T01:10:35 <p>Information published.</p> 4.0 2026-11-02T01:52:11 <p>Information published.</p> 3.0 2026-10-24T14:47:50 <p>Information published.</p> bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() Mariner Linux Yes CVE-2026-98644 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:21 <p>Information published.</p> 2.0 2026-10-20T14:45:46 <p>Information published.</p> 3.0 2026-10-21T18:39:01 <p>Information published.</p> 5.0 2026-11-02T01:50:04 <p>Information published.</p> 4.0 2026-10-24T14:45:19 <p>Information published.</p> tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context Mariner Linux Yes CVE-2026-98646 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:33 <p>Information published.</p> 2.0 2026-10-20T14:44:55 <p>Information published.</p> 3.0 2026-10-21T18:39:03 <p>Information published.</p> 5.0 2026-11-02T01:49:52 <p>Information published.</p> 4.0 2026-10-24T14:44:59 <p>Information published.</p> bpf: Fix divide-by-zero in btf_struct_walk() Mariner Linux Yes CVE-2026-98647 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:37 <p>Information published.</p> 2.0 2026-10-21T18:39:05 <p>Information published.</p> 4.0 2026-11-02T01:52:25 <p>Information published.</p> 3.0 2026-10-24T14:48:17 <p>Information published.</p> perf: Require kernel access for text poke events Mariner Linux Yes CVE-2026-98655 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:02:07 <p>Information published.</p> 2.0 2026-10-21T18:39:12 <p>Information published.</p> 3.0 2026-11-01T14:47:09 <p>Information published.</p> iio: trigger: cancel reenable_work before freeing trigger Mariner Linux Yes CVE-2026-98656 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:39:15 <p>Information published.</p> 1.0 2026-10-20T01:03:35 <p>Information published.</p> 3.0 2026-11-01T14:54:30 <p>Information published.</p> iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. Mariner Linux Yes CVE-2026-98668 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:39:38 <p>Information published.</p> 1.0 2026-10-20T01:11:01 <p>Information published.</p> 3.0 2026-11-01T14:46:25 <p>Information published.</p> iio: buffer: serialize buffer teardown with mode claims Mariner Linux Yes CVE-2026-98669 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:07:37 <p>Information published.</p> 2.0 2026-10-21T18:39:40 <p>Information published.</p> 3.0 2026-11-01T14:49:53 <p>Information published.</p> smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races Mariner Linux Yes CVE-2026-98681 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.0 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L 21932-17084 5.0 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:40:07 <p>Information published.</p> 1.0 2026-10-20T01:11:16 <p>Information published.</p> 3.0 2026-11-01T14:46:36 <p>Information published.</p> smb: client: flush and commit data before querying allocated ranges Mariner Linux Yes CVE-2026-98684 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 2.5 2.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U 21932-17084 2.5 2.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 3.0 2026-10-23T01:15:36 <p>Information published.</p> 2.0 2026-10-21T18:40:14 <p>Information published.</p> 1.0 2026-10-20T22:24:08 <p>Information published.</p> 4.0 2026-11-01T14:59:34 <p>Information published.</p> smb: client: discard post-EOF pagecache when extending a file via clone range Mariner Linux Yes CVE-2026-98685 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:40:16 <p>Information published.</p> 1.0 2026-10-20T01:04:52 <p>Information published.</p> 3.0 2026-10-24T14:46:29 <p>Information published.</p> smb: client: discard post-EOF pagecache when extending a file via zero range Mariner Linux Yes CVE-2026-98686 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-20T14:48:36 <p>Information published.</p> 3.0 2026-10-21T18:40:19 <p>Information published.</p> 1.0 2026-10-20T01:10:05 <p>Information published.</p> 4.0 2026-11-01T14:45:54 <p>Information published.</p> USB: serial: fix ioctl hangup race Mariner Linux Yes CVE-2026-98695 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.2 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.2 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-20T14:47:31 <p>Information published.</p> 3.0 2026-10-21T18:40:36 <p>Information published.</p> 1.0 2026-10-20T01:07:12 <p>Information published.</p> 4.0 2026-11-01T14:56:21 <p>Information published.</p> USB: serial: fix driver deregistration order Mariner Linux Yes CVE-2026-98696 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:40:40 <p>Information published.</p> 1.0 2026-10-20T01:02:11 <p>Information published.</p> 3.0 2026-11-01T14:53:44 <p>Information published.</p> USB: serial: fix dynamic id driver deregistration race Mariner Linux Yes CVE-2026-98697 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-20T14:48:48 <p>Information published.</p> 3.0 2026-10-21T18:40:42 <p>Information published.</p> 1.0 2026-10-20T01:11:04 <p>Information published.</p> 4.0 2026-11-01T14:46:31 <p>Information published.</p> wifi: mac80211: handle empty FILS association request payload Mariner Linux Yes CVE-2026-98698 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.7 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21932-17084 5.7 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:07:22 <p>Information published.</p> 2.0 2026-10-21T18:40:44 <p>Information published.</p> 3.0 2026-11-01T14:51:16 <p>Information published.</p> wifi: mac80211: fix mesh fast xmit path deletion UAF Mariner Linux Yes CVE-2026-98699 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.4 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:03:34 <p>Information published.</p> 2.0 2026-10-21T18:40:47 <p>Information published.</p> 3.0 2026-11-01T14:48:33 <p>Information published.</p> wifi: mac80211: set info->band for 802.3 encap offload frames Mariner Linux Yes CVE-2026-98700 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:40:49 <p>Information published.</p> 1.0 2026-10-20T01:06:26 <p>Information published.</p> 3.0 2026-11-01T14:54:51 <p>Information published.</p> wifi: mac80211: release mesh path quota on failed additions Mariner Linux Yes CVE-2026-98701 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.3 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21932-17084 4.3 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:02:28 <p>Information published.</p> 2.0 2026-10-21T18:40:51 <p>Information published.</p> 3.0 2026-11-01T14:47:18 <p>Information published.</p> wifi: mac80211: minstrel_ht: validate fixed rate index Mariner Linux Yes CVE-2026-98703 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.3 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H 21932-17084 6.3 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:58 <p>Information published.</p> 2.0 2026-10-20T14:45:36 <p>Information published.</p> 3.0 2026-10-21T18:40:55 <p>Information published.</p> 4.0 2026-11-01T14:50:51 <p>Information published.</p> wifi: mac80211: keep fallback association elements alive Mariner Linux Yes CVE-2026-98704 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.4 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:07:59 <p>Information published.</p> 2.0 2026-10-21T18:40:57 <p>Information published.</p> 3.0 2026-11-01T14:51:28 <p>Information published.</p> wifi: mac80211: account proxy paths against the mesh path limit Mariner Linux Yes CVE-2026-98705 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.7 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.7 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 3.0 2026-10-24T01:46:59 <p>Information published.</p> 1.0 2026-10-20T01:01:24 <p>Information published.</p> 2.0 2026-10-21T18:40:59 <p>Information published.</p> 4.0 2026-11-01T14:49:41 <p>Information published.</p> wifi: mac80211: drain PS delivery work during station teardown Mariner Linux Yes CVE-2026-98706 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 21932-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-20T14:47:06 <p>Information published.</p> 3.0 2026-10-21T18:41:01 <p>Information published.</p> 1.0 2026-10-20T01:04:12 <p>Information published.</p> 4.0 2026-11-01T14:54:39 <p>Information published.</p> wifi: mac80211: shut down RX BA session timer on teardown Mariner Linux Yes CVE-2026-98707 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.5 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 7.5 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:04:46 <p>Information published.</p> 2.0 2026-10-21T18:41:10 <p>Information published.</p> 3.0 2026-11-01T14:50:52 <p>Information published.</p> wifi: mac80211: keep paired old chanctx alive Mariner Linux Yes CVE-2026-98708 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:02:26 <p>Information published.</p> 2.0 2026-10-21T18:41:12 <p>Information published.</p> 3.0 2026-11-01T14:49:59 <p>Information published.</p> wifi: mac80211: count only matching reservations in reserved switch Mariner Linux Yes CVE-2026-98709 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 21932-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-20T14:46:24 <p>Information published.</p> 3.0 2026-10-21T18:41:14 <p>Information published.</p> 1.0 2026-10-20T01:01:51 <p>Information published.</p> 4.0 2026-11-01T14:52:42 <p>Information published.</p> wifi: iwlegacy: 3945: free EEPROM data on remove Mariner Linux Yes CVE-2026-98710 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:41:17 <p>Information published.</p> 1.0 2026-10-20T01:10:22 <p>Information published.</p> 3.0 2026-11-01T14:46:01 <p>Information published.</p> wifi: cw1200: fix TX padding OOB read leaking heap data to device Mariner Linux Yes CVE-2026-98711 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21932-17084 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-20T14:46:45 <p>Information published.</p> 3.0 2026-10-21T18:41:19 <p>Information published.</p> 1.0 2026-10-20T01:02:04 <p>Information published.</p> 4.0 2026-11-01T14:53:40 <p>Information published.</p> KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded Mariner Linux Yes CVE-2026-98714 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.2 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L 21932-17084 4.2 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:03:22 <p>Information published.</p> 2.0 2026-10-21T18:41:23 <p>Information published.</p> 3.0 2026-11-01T14:48:24 <p>Information published.</p> KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN Mariner Linux Yes CVE-2026-98715 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H 21932-17084 7.8 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:01 <p>Information published.</p> 2.0 2026-10-20T14:44:34 <p>Information published.</p> 3.0 2026-10-21T18:41:26 <p>Information published.</p> 4.0 2026-11-01T14:51:33 <p>Information published.</p> KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted Mariner Linux Yes CVE-2026-98716 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H 21932-17084 7.8 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:10:22 <p>Information published.</p> 2.0 2026-10-20T14:46:07 <p>Information published.</p> 3.0 2026-10-21T18:41:28 <p>Information published.</p> 4.0 2026-11-01T14:51:32 <p>Information published.</p> KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy Mariner Linux Yes CVE-2026-98717 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:13 <p>Information published.</p> 2.0 2026-10-20T14:44:52 <p>Information published.</p> 3.0 2026-10-21T18:41:31 <p>Information published.</p> 4.0 2026-11-01T14:50:25 <p>Information published.</p> KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified Mariner Linux Yes CVE-2026-98720 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.7 7.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H 21932-17084 7.7 7.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:04:29 <p>Information published.</p> 2.0 2026-10-21T18:41:33 <p>Information published.</p> 3.0 2026-11-01T14:48:57 <p>Information published.</p> mtd: block2mtd: Fix divide error when erase_size is zero Mariner Linux Yes CVE-2026-98722 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-20T14:46:50 <p>Information published.</p> 3.0 2026-10-21T18:41:39 <p>Information published.</p> 1.0 2026-10-20T01:02:50 <p>Information published.</p> 4.0 2026-11-01T14:54:04 <p>Information published.</p> nvme-multipath: fix underflow in ANA log bounds checks Mariner Linux Yes CVE-2026-98726 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.3 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H 21932-17084 6.3 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:02:41 <p>Information published.</p> 2.0 2026-10-21T18:41:47 <p>Information published.</p> 3.0 2026-11-01T14:50:08 <p>Information published.</p> Bluetooth: btintel: fix buffer over-read in btintel_hw_error() Mariner Linux Yes CVE-2026-98732 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 2.4 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21932-17084 2.4 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:07:24 <p>Information published.</p> 2.0 2026-10-21T18:42:00 <p>Information published.</p> 3.0 2026-11-01T14:49:39 <p>Information published.</p> Bluetooth: hci_core: Serialize fragmented ISO packet queueing Mariner Linux Yes CVE-2026-98733 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21932-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:04:47 <p>Information published.</p> 2.0 2026-10-21T18:42:02 <p>Information published.</p> 3.0 2026-11-01T14:49:01 <p>Information published.</p> Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown Mariner Linux Yes CVE-2026-98734 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.5 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 7.5 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:04 <p>Information published.</p> 1.0 2026-10-20T01:10:41 <p>Information published.</p> 3.0 2026-11-01T14:46:12 <p>Information published.</p> Bluetooth: hci_core: Serialize ACL scheduling with channel deletion Mariner Linux Yes CVE-2026-98735 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.5 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 7.5 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:07:31 <p>Information published.</p> 2.0 2026-10-21T18:42:06 <p>Information published.</p> 3.0 2026-11-01T14:49:46 <p>Information published.</p> Bluetooth: hci_conn: Lock parent access during enhanced SCO setup Mariner Linux Yes CVE-2026-98736 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 21932-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-20T14:47:39 <p>Information published.</p> 3.0 2026-10-21T18:42:10 <p>Information published.</p> 1.0 2026-10-20T01:07:30 <p>Information published.</p> 4.0 2026-11-01T14:45:10 <p>Information published.</p> Bluetooth: hci_sync: Fix inquiry cache use-after-free Mariner Linux Yes CVE-2026-98737 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 21932-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:06:56 <p>Information published.</p> 2.0 2026-10-20T14:44:15 <p>Information published.</p> 3.0 2026-10-21T18:42:12 <p>Information published.</p> 4.0 2026-11-01T14:49:15 <p>Information published.</p> Bluetooth: Serialize SMP remote OOB data access Mariner Linux Yes CVE-2026-98738 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.4 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:04:20 <p>Information published.</p> 2.0 2026-10-20T14:43:16 <p>Information published.</p> 3.0 2026-10-21T18:42:14 <p>Information published.</p> 4.0 2026-11-01T14:50:47 <p>Information published.</p> Bluetooth: RFCOMM: Fix initial port reference race Mariner Linux Yes CVE-2026-98739 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.8 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H 21932-17084 5.8 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:03:46 <p>Information published.</p> 2.0 2026-10-21T18:42:16 <p>Information published.</p> 3.0 2026-11-01T14:50:32 <p>Information published.</p> serial: core: fix NULL pointer dereference in serial_core_unregister_port() Mariner Linux Yes CVE-2026-98747 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:35 <p>Information published.</p> 1.0 2026-10-20T01:10:28 <p>Information published.</p> 3.0 2026-11-01T14:46:07 <p>Information published.</p> serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() Mariner Linux Yes CVE-2026-98748 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 4.1 3.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 4.1 3.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 3.0 2026-10-24T01:47:16 <p>Information published.</p> 1.0 2026-10-20T01:09:59 <p>Information published.</p> 2.0 2026-10-21T18:42:37 <p>Information published.</p> 4.0 2026-11-01T14:51:15 <p>Information published.</p> tty: serial: max3100: shut down timer before freeing port Mariner Linux Yes CVE-2026-98749 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:23 <p>Information published.</p> 2.0 2026-10-20T14:44:46 <p>Information published.</p> 3.0 2026-10-21T18:42:39 <p>Information published.</p> 4.0 2026-11-01T14:51:42 <p>Information published.</p> tty: fix saved termios reset race Mariner Linux Yes CVE-2026-98750 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:41 <p>Information published.</p> 1.0 2026-10-20T01:11:27 <p>Information published.</p> 3.0 2026-11-01T14:46:40 <p>Information published.</p> tty: abort break signalling on hangup Mariner Linux Yes CVE-2026-98751 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:43 <p>Information published.</p> 1.0 2026-10-20T01:04:42 <p>Information published.</p> 3.0 2026-11-01T14:54:44 <p>Information published.</p> tty: port: fix tty_port_tty_vhangup() race Mariner Linux Yes CVE-2026-98752 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.7 5.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 5.7 5.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:02:01 <p>Information published.</p> 2.0 2026-10-20T14:43:20 <p>Information published.</p> 3.0 2026-10-21T18:42:45 <p>Information published.</p> 4.0 2026-11-01T14:47:05 <p>Information published.</p> tty: tty_port: restore TTY_IO_ERROR on activation failure Mariner Linux Yes CVE-2026-98753 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:38:58 <p>Information published.</p> 1.0 2026-10-20T01:07:18 <p>Information published.</p> 3.0 2026-11-01T14:56:27 <p>Information published.</p> USB: dwc2: shut down wakeup timer before freeing HCD state Mariner Linux Yes CVE-2026-98762 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:09:57 <p>Information published.</p> 2.0 2026-10-20T14:46:15 <p>Information published.</p> 3.0 2026-10-21T18:39:18 <p>Information published.</p> 4.0 2026-11-01T14:52:28 <p>Information published.</p> usb: core: clear both ep_in and ep_out for non-ep0 control endpoints Mariner Linux Yes CVE-2026-98763 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.8 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.8 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:10 <p>Information published.</p> 2.0 2026-10-21T18:39:20 <p>Information published.</p> 3.0 2026-11-01T14:50:18 <p>Information published.</p> USB: serial: fix port tear down use-after-free Mariner Linux Yes CVE-2026-98772 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.7 5.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 5.7 5.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:04 <p>Information published.</p> 2.0 2026-10-20T14:44:38 <p>Information published.</p> 3.0 2026-10-21T18:39:39 <p>Information published.</p> 4.0 2026-11-01T14:51:37 <p>Information published.</p> USB: cdc-acm: skip URB restart in port_shutdown if disconnected Mariner Linux Yes CVE-2026-98773 21932-17084 21932-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:07 <p>Information published.</p> 2.0 2026-10-20T14:44:42 <p>Information published.</p> 3.0 2026-10-24T14:44:44 <p>Information published.</p> drm/amdgpu: fix ACP MFD device leak on init failure Mariner Linux Yes CVE-2026-98779 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:07:49 <p>Information published.</p> 2.0 2026-10-20T14:44:39 <p>Information published.</p> 3.0 2026-10-21T18:39:50 <p>Information published.</p> 4.0 2026-11-01T14:50:04 <p>Information published.</p> drm/amdgpu: fix IP instance memory leak on kobject add failure Mariner Linux Yes CVE-2026-98780 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:07:37 <p>Information published.</p> 2.0 2026-10-20T14:44:26 <p>Information published.</p> 3.0 2026-10-21T18:39:52 <p>Information published.</p> 4.0 2026-11-01T14:51:25 <p>Information published.</p> drm/mediatek: Fix pdev reference leak in mtk_drm_bind() Mariner Linux Yes CVE-2026-98781 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 3.0 2026-10-23T01:15:40 <p>Information published.</p> 2.0 2026-10-21T18:39:54 <p>Information published.</p> 1.0 2026-10-20T22:24:03 <p>Information published.</p> 4.0 2026-11-01T14:59:39 <p>Information published.</p> drm/mediatek: Fix ovl adaptor platform device leak Mariner Linux Yes CVE-2026-98782 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 3.0 2026-10-23T01:15:47 <p>Information published.</p> 2.0 2026-10-21T18:39:56 <p>Information published.</p> 1.0 2026-10-20T22:24:04 <p>Information published.</p> 4.0 2026-11-01T14:59:45 <p>Information published.</p> drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device Mariner Linux Yes CVE-2026-98783 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 3.0 2026-10-23T01:15:53 <p>Information published.</p> 2.0 2026-10-21T18:39:58 <p>Information published.</p> 1.0 2026-10-20T22:24:05 <p>Information published.</p> 4.0 2026-11-01T14:59:50 <p>Information published.</p> drm/amdgpu/gfx6: fix firmware leak on teardown Mariner Linux Yes CVE-2026-98784 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:10:18 <p>Information published.</p> 2.0 2026-10-20T14:46:03 <p>Information published.</p> 3.0 2026-10-21T18:40:01 <p>Information published.</p> 4.0 2026-11-01T14:51:26 <p>Information published.</p> drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend Mariner Linux Yes CVE-2026-98785 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:57 <p>Information published.</p> 2.0 2026-10-21T18:40:03 <p>Information published.</p> 3.0 2026-10-24T14:45:03 <p>Information published.</p> drm/amd/display: guard dc_sink dereferences in MST mode validation Mariner Linux Yes CVE-2026-98786 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.0 4.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H 21932-17084 4.0 4.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:40:05 <p>Information published.</p> 1.0 2026-10-20T01:08:09 <p>Information published.</p> 3.0 2026-11-01T14:45:20 <p>Information published.</p> bpf: Fix objects stuck in free_by_rcu_ttrace Mariner Linux Yes CVE-2026-98789 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:03:28 <p>Information published.</p> 2.0 2026-10-21T18:40:09 <p>Information published.</p> 3.0 2026-11-01T14:48:28 <p>Information published.</p> perf: Fix race between perf_event_exit_task() and perf_pending_task() Mariner Linux Yes CVE-2026-98790 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:09:37 <p>Information published.</p> 2.0 2026-10-21T18:40:11 <p>Information published.</p> 3.0 2026-11-01T14:51:05 <p>Information published.</p> netfilter: flowtable: generalize pending status bit Mariner Linux Yes CVE-2026-98792 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:40:16 <p>Information published.</p> 1.0 2026-10-20T01:06:48 <p>Information published.</p> 3.0 2026-11-01T14:56:10 <p>Information published.</p> netfilter: bpf: reject invalid NAT manipulation types Mariner Linux Yes CVE-2026-98793 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:06:35 <p>Information published.</p> 2.0 2026-10-21T18:40:18 <p>Information published.</p> 3.0 2026-11-01T14:49:05 <p>Information published.</p> ipvs: filter some flags received in the backup server Mariner Linux Yes CVE-2026-98794 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-20T14:46:19 <p>Information published.</p> 3.0 2026-10-21T18:40:20 <p>Information published.</p> 1.0 2026-10-20T01:01:49 <p>Information published.</p> 4.0 2026-11-01T14:52:37 <p>Information published.</p> net: cap skb->queue_mapping when the tx queue is picked Mariner Linux Yes CVE-2026-98797 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:04:04 <p>Information published.</p> 2.0 2026-10-21T18:40:28 <p>Information published.</p> 3.0 2026-11-01T14:48:52 <p>Information published.</p> net: bcmgenet: fix NULL dereference in set_coalesce before first open Mariner Linux Yes CVE-2026-98798 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:03:19 <p>Information published.</p> 2.0 2026-10-21T18:40:30 <p>Information published.</p> 3.0 2026-11-01T14:50:18 <p>Information published.</p> bpf: Skip detached progs in trampoline images that are still in use Mariner Linux Yes CVE-2026-98799 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:03:29 <p>Information published.</p> 2.0 2026-10-21T18:40:32 <p>Information published.</p> 3.0 2026-11-01T14:50:27 <p>Information published.</p> bpf: Wait for an RCU tasks grace period before freeing trampoline progs Mariner Linux Yes CVE-2026-98800 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:09:13 <p>Information published.</p> 2.0 2026-10-21T18:40:34 <p>Information published.</p> 3.0 2026-11-01T14:52:13 <p>Information published.</p> net: restrict SO_RESERVE_MEM to TCP sockets and cap max value Mariner Linux Yes CVE-2026-98801 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:40:36 <p>Information published.</p> 1.0 2026-10-20T01:08:51 <p>Information published.</p> 3.0 2026-11-01T14:45:30 <p>Information published.</p> seg6: ensure packet data is writable before modifying SRH and IPv6 DA Mariner Linux Yes CVE-2026-98802 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 21932-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:40:43 <p>Information published.</p> 1.0 2026-10-20T01:10:47 <p>Information published.</p> 3.0 2026-11-01T14:46:16 <p>Information published.</p> net: stmmac: fix rx Scatter-Gather support Mariner Linux Yes CVE-2026-98803 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:40:46 <p>Information published.</p> 1.0 2026-10-20T01:03:30 <p>Information published.</p> 3.0 2026-11-01T14:54:26 <p>Information published.</p> tipc: prevent GCM nonce reuse on peer key changes Mariner Linux Yes CVE-2026-98805 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.8 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21932-17084 6.8 6.8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:01:56 <p>Information published.</p> 2.0 2026-10-21T18:40:50 <p>Information published.</p> 3.0 2026-11-01T14:49:46 <p>Information published.</p> net/mlx5: Fix slab-out-of-bounds when handling team device events Mariner Linux Yes CVE-2026-98807 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L 21932-17084 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:40:54 <p>Information published.</p> 1.0 2026-10-20T01:02:36 <p>Information published.</p> 3.0 2026-11-01T14:53:59 <p>Information published.</p> net: systemport: Fix buffer overflow in bcm_sysport_get_stats() Mariner Linux Yes CVE-2026-98808 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21932-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:40:56 <p>Information published.</p> 1.0 2026-10-20T01:08:46 <p>Information published.</p> 3.0 2026-11-01T14:45:26 <p>Information published.</p> Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister Mariner Linux Yes CVE-2026-98809 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:06:40 <p>Information published.</p> 2.0 2026-10-21T18:40:58 <p>Information published.</p> 3.0 2026-11-01T14:51:01 <p>Information published.</p> wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() Mariner Linux Yes CVE-2026-98810 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H 21932-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:03:24 <p>Information published.</p> 2.0 2026-10-21T18:41:00 <p>Information published.</p> 3.0 2026-11-01T14:50:23 <p>Information published.</p> net/sched: cls_api: reclaim an empty proto on the error path Mariner Linux Yes CVE-2026-98811 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:48 <p>Information published.</p> 2.0 2026-10-21T18:41:06 <p>Information published.</p> 3.0 2026-11-01T14:50:41 <p>Information published.</p> nvme: fix command effects log lifetime for multipath heads Mariner Linux Yes CVE-2026-98814 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-20T14:46:40 <p>Information published.</p> 3.0 2026-10-21T18:41:13 <p>Information published.</p> 1.0 2026-10-20T01:02:01 <p>Information published.</p> 4.0 2026-11-01T14:53:36 <p>Information published.</p> nvme: fix cdev lifetime Mariner Linux Yes CVE-2026-98815 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H 21932-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-20T14:47:35 <p>Information published.</p> 3.0 2026-10-21T18:41:15 <p>Information published.</p> 1.0 2026-10-20T01:07:28 <p>Information published.</p> 4.0 2026-11-01T14:45:05 <p>Information published.</p> bpf: Fix overflow of jump offset in constant blinding Mariner Linux Yes CVE-2026-98816 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:41:17 <p>Information published.</p> 1.0 2026-10-20T01:10:55 <p>Information published.</p> 3.0 2026-11-01T14:46:21 <p>Information published.</p> Bluetooth: btintel: validate DDC record lengths Mariner Linux Yes CVE-2026-98819 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.2 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H 21932-17084 5.2 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:02:11 <p>Information published.</p> 2.0 2026-10-21T18:41:22 <p>Information published.</p> 3.0 2026-11-01T14:49:53 <p>Information published.</p> blk-mq: set RQF_USE_SCHED when the operation is known Mariner Linux Yes CVE-2026-98820 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:03:52 <p>Information published.</p> 2.0 2026-10-20T14:43:54 <p>Information published.</p> 3.0 2026-10-21T18:41:24 <p>Information published.</p> 4.0 2026-11-01T14:48:47 <p>Information published.</p> wifi: mac80211: prevent AP VLAN tx from other interfaces Mariner Linux Yes CVE-2026-98822 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N 21932-17084 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:41:28 <p>Information published.</p> 1.0 2026-10-20T01:06:34 <p>Information published.</p> 3.0 2026-11-01T14:56:04 <p>Information published.</p> wifi: cfg80211: preserve hidden-group beacon IE ownership Mariner Linux Yes CVE-2026-98823 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.4 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:09:04 <p>Information published.</p> 2.0 2026-10-21T18:41:31 <p>Information published.</p> 3.0 2026-11-01T14:50:56 <p>Information published.</p> wifi: mac80211: validate TX status rate metadata Mariner Linux Yes CVE-2026-98824 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.2 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H 21932-17084 5.2 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:07:11 <p>Information published.</p> 2.0 2026-10-20T14:44:27 <p>Information published.</p> 3.0 2026-10-21T18:41:34 <p>Information published.</p> 4.0 2026-11-01T14:49:33 <p>Information published.</p> wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE Mariner Linux Yes CVE-2026-98827 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:07:25 <p>Information published.</p> 2.0 2026-10-20T14:44:10 <p>Information published.</p> 3.0 2026-10-21T18:41:41 <p>Information published.</p> 4.0 2026-11-01T14:51:20 <p>Information published.</p> wifi: ath9k: reject short WMI command responses Mariner Linux Yes CVE-2026-98828 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.2 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H 21932-17084 5.2 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:06:59 <p>Information published.</p> 2.0 2026-10-20T14:44:19 <p>Information published.</p> 3.0 2026-10-21T18:41:43 <p>Information published.</p> 4.0 2026-11-01T14:49:21 <p>Information published.</p> wifi: mac80211: drop oversized fragments to avoid extra_len overflow Mariner Linux Yes CVE-2026-98829 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 8.1 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 8.1 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:04 <p>Information published.</p> 2.0 2026-10-20T14:44:48 <p>Information published.</p> 3.0 2026-10-21T18:41:45 <p>Information published.</p> 4.0 2026-11-01T14:50:13 <p>Information published.</p> of/overlay: don't leak fragment references when changeset init fails Mariner Linux Yes CVE-2026-98831 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:02:52 <p>Information published.</p> 2.0 2026-10-21T18:41:49 <p>Information published.</p> 3.0 2026-11-01T14:48:10 <p>Information published.</p> mtd: core: call _get_device() with the master MTD Mariner Linux Yes CVE-2026-98833 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:09:24 <p>Information published.</p> 2.0 2026-10-20T14:45:51 <p>Information published.</p> 3.0 2026-10-21T18:41:52 <p>Information published.</p> 4.0 2026-11-01T14:52:18 <p>Information published.</p> mtd: core: avoid double-free of OTP NVMEM device Mariner Linux Yes CVE-2026-98834 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:02:14 <p>Information published.</p> 2.0 2026-10-21T18:41:54 <p>Information published.</p> 3.0 2026-11-01T14:47:13 <p>Information published.</p> vt: skip screen update for DEC alignment test on backgroup consoles Mariner Linux Yes CVE-2026-98838 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:03:49 <p>Information published.</p> 2.0 2026-10-21T18:42:01 <p>Information published.</p> 3.0 2026-11-01T14:48:42 <p>Information published.</p> vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() Mariner Linux Yes CVE-2026-98839 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.0 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L 21932-17084 3.0 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:03 <p>Information published.</p> 1.0 2026-10-20T01:03:17 <p>Information published.</p> 3.0 2026-11-01T14:54:21 <p>Information published.</p> vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF Mariner Linux Yes CVE-2026-98840 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:17 <p>Information published.</p> 2.0 2026-10-24T14:47:03 <p>Information published.</p> sctp: check RCV_SHUTDOWN after the sendmsg connect wait Mariner Linux Yes CVE-2026-98846 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21932-17084 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:16 <p>Information published.</p> 1.0 2026-10-20T01:09:46 <p>Information published.</p> 3.0 2026-11-01T14:45:39 <p>Information published.</p> rtc: ac100: Assign .num before accessing .hws Mariner Linux Yes CVE-2026-98848 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 4.1 3.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 4.1 3.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 3.0 2026-10-24T01:47:33 <p>Information published.</p> 1.0 2026-10-20T01:10:42 <p>Information published.</p> 2.0 2026-10-21T18:42:20 <p>Information published.</p> 4.0 2026-11-01T14:51:48 <p>Information published.</p> net/packet: prevent TX_RING byte count overflow Mariner Linux Yes CVE-2026-98850 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:09:49 <p>Information published.</p> 2.0 2026-10-20T14:46:03 <p>Information published.</p> 3.0 2026-10-21T18:42:25 <p>Information published.</p> 4.0 2026-11-01T14:52:23 <p>Information published.</p> netfilter: nft_flow_offload: drop flowtable reference on init error path Mariner Linux Yes CVE-2026-98851 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:00 <p>Information published.</p> 2.0 2026-10-21T18:42:27 <p>Information published.</p> 3.0 2026-11-01T14:50:08 <p>Information published.</p> net: extend IPv6 exthdr detection of tunneled packets Mariner Linux Yes CVE-2026-98852 21932-17084 21932-17084 Low 21932-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:48:07 <p>Information published.</p> 1.0 2026-10-20T01:08:39 <p>Information published.</p> 3.0 2026-10-24T14:47:13 <p>Information published.</p> net: gso: limit recursive IP-in-IP segmentation Mariner Linux Yes CVE-2026-98853 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:30 <p>Information published.</p> 1.0 2026-10-20T01:01:39 <p>Information published.</p> 3.0 2026-11-01T14:52:32 <p>Information published.</p> of/overlay: only treat a positive changeset id as registered Mariner Linux Yes CVE-2026-98854 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:07:44 <p>Information published.</p> 2.0 2026-10-21T18:42:32 <p>Information published.</p> 3.0 2026-11-01T14:49:59 <p>Information published.</p> of/overlay: put property on deadprops only after changeset add succeeds Mariner Linux Yes CVE-2026-98855 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-21T18:42:35 <p>Information published.</p> 1.0 2026-10-20T01:06:53 <p>Information published.</p> 3.0 2026-11-01T14:56:15 <p>Information published.</p> kprobes: Skip disarmed probes when checking optkprobe overlap Mariner Linux Yes CVE-2026-98856 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:06:55 <p>Information published.</p> 2.0 2026-10-21T18:42:37 <p>Information published.</p> 3.0 2026-11-01T14:51:09 <p>Information published.</p> ipvs: bound LBLCR and LBLC cache growth Mariner Linux Yes CVE-2026-98857 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:01:51 <p>Information published.</p> 2.0 2026-10-21T18:42:39 <p>Information published.</p> 3.0 2026-11-01T14:46:46 <p>Information published.</p> HID: multitouch: stop the release timer from being rearmed on remove Mariner Linux Yes CVE-2026-98859 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.7 5.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 5.7 5.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:52 <p>Information published.</p> 2.0 2026-10-20T14:45:30 <p>Information published.</p> 3.0 2026-10-21T18:42:43 <p>Information published.</p> 4.0 2026-11-01T14:52:07 <p>Information published.</p> audit: fix exe mark UAF in kill_rules() Mariner Linux Yes CVE-2026-98862 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.0 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H 21932-17084 6.0 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-20T01:08:21 <p>Information published.</p> 2.0 2026-10-20T14:45:01 <p>Information published.</p> 3.0 2026-10-21T18:42:45 <p>Information published.</p> 4.0 2026-11-01T14:50:31 <p>Information published.</p> KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails Mariner Linux Yes CVE-2026-98863 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 3.0 2026-10-24T01:47:29 <p>Information published.</p> 1.0 2026-10-20T01:10:33 <p>Information published.</p> 2.0 2026-10-21T18:42:49 <p>Information published.</p> 4.0 2026-11-01T14:51:42 <p>Information published.</p> freevxfs: don't BUG() on unknown typed-extent type Mariner Linux Yes CVE-2026-98872 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:02:54 <p>Information published.</p> 4.0 2026-11-02T01:46:32 <p>Information published.</p> 2.0 2026-10-24T14:45:13 <p>Information published.</p> 3.0 2026-10-26T01:03:48 <p>Information published.</p> netfilter: nf_conntrack_expect: zero at allocation time Mariner Linux Yes CVE-2026-98873 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:03:02 <p>Information published.</p> 4.0 2026-11-02T01:46:35 <p>Information published.</p> 2.0 2026-10-24T14:45:17 <p>Information published.</p> 3.0 2026-10-26T01:03:50 <p>Information published.</p> wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect Mariner Linux Yes CVE-2026-98874 21932-17084 21932-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:01:41 <p>Information published.</p> 2.0 2026-10-26T01:03:53 <p>Information published.</p> 4.0 2026-10-28T01:49:03 <p>Information published.</p> 3.0 2026-10-27T14:48:06 <p>Information published.</p> drm/nouveau/gsp: add SEC2 to GA100 chip table Mariner Linux Yes CVE-2026-98875 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:03:09 <p>Information published.</p> 2.0 2026-10-24T14:45:21 <p>Information published.</p> 3.0 2026-10-26T01:03:54 <p>Information published.</p> host1x: bus: Fix missing ops null check in error teardown Mariner Linux Yes CVE-2026-98876 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:03:14 <p>Information published.</p> 4.0 2026-11-02T01:46:38 <p>Information published.</p> 2.0 2026-10-24T14:45:24 <p>Information published.</p> 3.0 2026-10-26T01:03:56 <p>Information published.</p> irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed Mariner Linux Yes CVE-2026-98877 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:03:19 <p>Information published.</p> 4.0 2026-11-02T01:46:42 <p>Information published.</p> 2.0 2026-10-24T14:45:29 <p>Information published.</p> 3.0 2026-10-26T01:03:59 <p>Information published.</p> irqchip/gic-v5: Immediately exec priority drop following activate Mariner Linux Yes CVE-2026-98878 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:04:56 <p>Information published.</p> 1.0 2026-10-24T01:01:47 <p>Information published.</p> 4.0 2026-10-28T01:49:07 <p>Information published.</p> 3.0 2026-10-27T14:48:11 <p>Information published.</p> isofs: handle set_blocksize failures Mariner Linux Yes CVE-2026-98879 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:04:59 <p>Information published.</p> 1.0 2026-10-24T01:03:25 <p>Information published.</p> 4.0 2026-11-02T01:46:45 <p>Information published.</p> 3.0 2026-10-24T14:45:33 <p>Information published.</p> ntfs3: handle set_blocksize failures Mariner Linux Yes CVE-2026-98880 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:02 <p>Information published.</p> 1.0 2026-10-24T01:03:33 <p>Information published.</p> 4.0 2026-11-02T01:46:49 <p>Information published.</p> 3.0 2026-10-24T14:45:38 <p>Information published.</p> net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() Mariner Linux Yes CVE-2026-98881 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:04 <p>Information published.</p> 1.0 2026-10-24T01:03:39 <p>Information published.</p> 4.0 2026-11-02T01:46:54 <p>Information published.</p> 3.0 2026-10-24T14:45:43 <p>Information published.</p> media: chips-media: wave5: Add range checks for dec_output_info Mariner Linux Yes CVE-2026-98882 21932-17084 21932-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:06 <p>Information published.</p> 1.0 2026-10-24T01:01:51 <p>Information published.</p> 4.0 2026-10-28T01:49:11 <p>Information published.</p> 3.0 2026-10-27T14:48:16 <p>Information published.</p> serial: 8250_port: recognize UPIO_AU Mariner Linux Yes CVE-2026-98883 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:08 <p>Information published.</p> 1.0 2026-10-24T01:01:57 <p>Information published.</p> 4.0 2026-10-28T01:49:14 <p>Information published.</p> 3.0 2026-10-27T14:48:20 <p>Information published.</p> mmc: core: Add validation for host-provided max_segs Mariner Linux Yes CVE-2026-98884 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:10 <p>Information published.</p> 1.0 2026-10-24T01:03:45 <p>Information published.</p> 4.0 2026-11-02T01:46:59 <p>Information published.</p> 3.0 2026-10-24T14:45:46 <p>Information published.</p> ima: return error early if file xattr cannot be changed Mariner Linux Yes CVE-2026-98885 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:12 <p>Information published.</p> 1.0 2026-10-24T01:03:50 <p>Information published.</p> 4.0 2026-11-02T01:47:03 <p>Information published.</p> 3.0 2026-10-24T14:45:50 <p>Information published.</p> drm/gma500: return errors from Oaktrail HDMI I2C reads Mariner Linux Yes CVE-2026-98886 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:14 <p>Information published.</p> 1.0 2026-10-24T01:03:57 <p>Information published.</p> 4.0 2026-11-02T01:47:07 <p>Information published.</p> 3.0 2026-10-24T14:45:53 <p>Information published.</p> wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO Mariner Linux Yes CVE-2026-98887 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:16 <p>Information published.</p> 1.0 2026-10-24T01:04:04 <p>Information published.</p> 4.0 2026-11-02T01:47:11 <p>Information published.</p> 3.0 2026-10-24T14:45:57 <p>Information published.</p> arm64: kprobes: Allow reentering kprobes while single-stepping Mariner Linux Yes CVE-2026-98888 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:18 <p>Information published.</p> 1.0 2026-10-24T01:04:09 <p>Information published.</p> 4.0 2026-11-02T01:47:14 <p>Information published.</p> 3.0 2026-10-24T14:46:01 <p>Information published.</p> wifi: iwlwifi: mvm: fix sched scan IE sizing Mariner Linux Yes CVE-2026-98889 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:20 <p>Information published.</p> 1.0 2026-10-24T01:04:15 <p>Information published.</p> 4.0 2026-11-02T01:47:17 <p>Information published.</p> 3.0 2026-10-24T14:46:05 <p>Information published.</p> wifi: libertas: reject short monitor TX frames Mariner Linux Yes CVE-2026-98890 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:22 <p>Information published.</p> 1.0 2026-10-24T01:04:21 <p>Information published.</p> 4.0 2026-11-02T01:47:21 <p>Information published.</p> 3.0 2026-10-24T14:46:10 <p>Information published.</p> wifi: mac80211: validate deauth frame length before reason access Mariner Linux Yes CVE-2026-98891 21932-17084 21932-17084 Moderate 21932-17084 4.3 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:25 <p>Information published.</p> 1.0 2026-10-24T01:04:27 <p>Information published.</p> 4.0 2026-11-02T01:47:24 <p>Information published.</p> 3.0 2026-10-24T14:46:14 <p>Information published.</p> firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size Mariner Linux Yes CVE-2026-98892 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:27 <p>Information published.</p> 1.0 2026-10-24T01:04:32 <p>Information published.</p> 4.0 2026-11-02T01:47:27 <p>Information published.</p> 3.0 2026-10-24T14:46:18 <p>Information published.</p> firmware: arm_scmi: Validate SENSOR_UPDATE payload size Mariner Linux Yes CVE-2026-98893 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:29 <p>Information published.</p> 1.0 2026-10-24T01:04:35 <p>Information published.</p> 3.1 2026-10-29T01:43:28 <p>Information published.</p> 4.0 2026-11-02T01:47:32 <p>Information published.</p> 3.0 2026-10-24T14:46:22 <p>Information published.</p> drm/amd/ras: reset CPER ring on corrupt entry size Mariner Linux Yes CVE-2026-98894 21932-17084 21932-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:31 <p>Information published.</p> 1.0 2026-10-24T01:02:03 <p>Information published.</p> 4.0 2026-10-28T01:49:17 <p>Information published.</p> 3.0 2026-10-27T14:48:25 <p>Information published.</p> net/mlx5: HWS, Handle destroying table that has a miss table Mariner Linux Yes CVE-2026-98895 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:33 <p>Information published.</p> 1.0 2026-10-24T01:02:08 <p>Information published.</p> 4.0 2026-10-28T01:49:21 <p>Information published.</p> 3.0 2026-10-27T14:48:29 <p>Information published.</p> thunderbolt: Keep the domain reference while processing hotplug Mariner Linux Yes CVE-2026-98896 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:35 <p>Information published.</p> 1.0 2026-10-24T01:04:40 <p>Information published.</p> 4.0 2026-11-02T01:47:36 <p>Information published.</p> 3.0 2026-10-24T14:46:25 <p>Information published.</p> ksmbd: don't hold ci->m_lock while waiting for a lease break ack Mariner Linux Yes CVE-2026-98897 21932-17084 21932-17084 Moderate 21932-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:37 <p>Information published.</p> 1.0 2026-10-24T01:02:13 <p>Information published.</p> 4.0 2026-10-28T01:49:24 <p>Information published.</p> 3.0 2026-10-27T14:48:33 <p>Information published.</p> drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized Mariner Linux Yes CVE-2026-98898 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:39 <p>Information published.</p> 1.0 2026-10-24T01:04:47 <p>Information published.</p> 4.0 2026-11-02T01:47:43 <p>Information published.</p> 3.0 2026-10-24T14:46:30 <p>Information published.</p> netfilter: ipset: mark the rcu locked areas properly Mariner Linux Yes CVE-2026-98899 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:41 <p>Information published.</p> 1.0 2026-10-24T01:04:52 <p>Information published.</p> 4.0 2026-11-02T01:47:47 <p>Information published.</p> 3.0 2026-10-24T14:46:34 <p>Information published.</p> xen/gntalloc: validate grant count before allocation Mariner Linux Yes CVE-2026-98900 21932-17084 21932-17084 Important 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:43 <p>Information published.</p> 1.0 2026-10-24T01:04:58 <p>Information published.</p> 4.0 2026-11-02T01:47:50 <p>Information published.</p> 3.0 2026-10-24T14:46:37 <p>Information published.</p> ksmbd: fix lease break and ack state handling Mariner Linux Yes CVE-2026-98901 21932-17084 21932-17084 Moderate 21932-17084 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:46 <p>Information published.</p> 1.0 2026-10-24T01:05:05 <p>Information published.</p> 4.0 2026-11-02T01:47:54 <p>Information published.</p> 3.0 2026-10-24T14:46:42 <p>Information published.</p> md/raid5: let stripe batch bm_seq comparison wrap-safe Mariner Linux Yes CVE-2026-98902 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:48 <p>Information published.</p> 1.0 2026-10-24T01:05:11 <p>Information published.</p> 4.0 2026-11-02T01:47:57 <p>Information published.</p> 3.0 2026-10-24T14:46:45 <p>Information published.</p> mailbox: imx: Add a channel shutdown field Mariner Linux Yes CVE-2026-98903 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.7 4.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 4.7 4.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-24T01:05:50 <p>Information published.</p> 1.0 2026-10-24T01:02:18 <p>Information published.</p> 3.0 2026-11-01T15:00:08 <p>Information published.</p> mailbox: imx: Use devm_pm_runtime_enable() Mariner Linux Yes CVE-2026-98904 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-24T01:05:52 <p>Information published.</p> 1.0 2026-10-24T01:02:24 <p>Information published.</p> 3.0 2026-11-01T15:00:12 <p>Information published.</p> drm/amdkfd: Properly acquire queue buffers in CRIU restore Mariner Linux Yes CVE-2026-98905 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:05:54 <p>Information published.</p> 1.0 2026-10-24T01:02:30 <p>Information published.</p> 4.0 2026-10-28T01:49:29 <p>Information published.</p> 3.0 2026-10-27T14:48:37 <p>Information published.</p> net: lan966x: restore RX state on reload failure Mariner Linux Yes CVE-2026-98906 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-24T01:05:56 <p>Information published.</p> 1.0 2026-10-24T01:02:35 <p>Information published.</p> 3.0 2026-11-01T15:00:17 <p>Information published.</p> btrfs: protect sb_write_pointer() with invalidate lock Mariner Linux Yes CVE-2026-98907 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:06:01 <p>Information published.</p> 1.0 2026-10-24T01:05:17 <p>Information published.</p> 3.0 2026-10-24T14:46:50 <p>Information published.</p> net: microchip: sparx5: clean up PSFP resources on flower setup failure Mariner Linux Yes CVE-2026-98908 21932-17084 21932-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:07:08 <p>Information published.</p> 1.0 2026-10-24T01:05:23 <p>Information published.</p> 4.0 2026-11-02T01:48:01 <p>Information published.</p> 3.0 2026-10-24T14:46:55 <p>Information published.</p> net: cpsw_new: unregister devlink on port registration failure Mariner Linux Yes CVE-2026-98909 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:07:11 <p>Information published.</p> 1.0 2026-10-24T01:05:30 <p>Information published.</p> 4.0 2026-11-02T01:48:05 <p>Information published.</p> 3.0 2026-10-24T14:46:59 <p>Information published.</p> drm/amdkfd: Unwind debug trap enable on copy_to_user failure Mariner Linux Yes CVE-2026-98910 21932-17084 21932-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:07:14 <p>Information published.</p> 1.0 2026-10-24T01:05:35 <p>Information published.</p> 4.0 2026-11-02T01:48:08 <p>Information published.</p> 3.0 2026-10-24T14:47:03 <p>Information published.</p> dpaa2-switch: fix the error path in dpaa2_switch_rx() Mariner Linux Yes CVE-2026-98911 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:07:17 <p>Information published.</p> 1.0 2026-10-24T01:05:41 <p>Information published.</p> 4.0 2026-11-02T01:48:11 <p>Information published.</p> 3.0 2026-10-24T14:47:07 <p>Information published.</p> ALSA: seq: oss: Reject reads that cannot fit the next event Mariner Linux Yes CVE-2026-98912 21932-17084 21932-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:07:19 <p>Information published.</p> 1.0 2026-10-24T01:05:47 <p>Information published.</p> 4.0 2026-11-02T01:48:15 <p>Information published.</p> 3.0 2026-10-24T14:47:11 <p>Information published.</p> net: thunderx: fix PTP device ref leak in nicvf_probe() Mariner Linux Yes CVE-2026-98913 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:07:21 <p>Information published.</p> 1.0 2026-10-24T01:05:54 <p>Information published.</p> 4.0 2026-11-02T01:48:18 <p>Information published.</p> 3.0 2026-10-24T14:47:14 <p>Information published.</p> drm/amdgpu: cap ATOM command table nesting depth Mariner Linux Yes CVE-2026-98914 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-24T01:07:26 <p>Information published.</p> 1.0 2026-10-24T01:02:41 <p>Information published.</p> 3.0 2026-11-01T15:00:22 <p>Information published.</p> media: video-i2c: use vb2_video_unregister_device on driver removal Mariner Linux Yes CVE-2026-98915 21932-17084 21932-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-24T01:07:37 <p>Information published.</p> 1.0 2026-10-24T01:07:09 <p>Information published.</p> 4.0 2026-11-02T01:48:21 <p>Information published.</p> 3.0 2026-10-24T14:47:18 <p>Information published.</p> wifi: nl80211: check link is beaconing for color change Mariner Linux Yes CVE-2026-98916 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 2.0 2026-10-24T01:07:39 <p>Information published.</p> 1.0 2026-10-24T01:02:47 <p>Information published.</p> 3.0 2026-11-01T15:00:28 <p>Information published.</p> fs: avoid repeated scans in evict_inodes() Mariner Linux Yes CVE-2026-98924 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-24T01:07:52 <p>Information published.</p> 2.0 2026-10-25T01:02:55 <p>Information published.</p> 4.0 2026-11-01T15:00:33 <p>Information published.</p> 3.0 2026-10-26T14:46:22 <p>Information published.</p> bpf, sockmap: Fix self-redirect copied_seq double-counting Mariner Linux Yes CVE-2026-98925 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:07:55 <p>Information published.</p> 5.0 2026-11-02T01:48:25 <p>Information published.</p> 3.0 2026-10-26T14:49:27 <p>Information published.</p> 4.0 2026-11-01T14:45:41 <p>Information published.</p> 2.0 2026-10-25T01:05:31 <p>Information published.</p> drm/amd/display: Remove sink usage from DPMS Mariner Linux Yes CVE-2026-98926 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:08:01 <p>Information published.</p> 4.0 2026-11-01T15:00:38 <p>Information published.</p> 2.0 2026-10-25T01:01:33 <p>Information published.</p> 3.0 2026-10-26T14:46:26 <p>Information published.</p> mtd: spinand: fix NULL pointer dereference with no ECC engine Mariner Linux Yes CVE-2026-98931 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:08:26 <p>Information published.</p> 4.0 2026-11-01T15:00:42 <p>Information published.</p> 2.0 2026-10-25T01:01:40 <p>Information published.</p> 3.0 2026-10-26T14:46:40 <p>Information published.</p> ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() Mariner Linux Yes CVE-2026-98934 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:08:36 <p>Information published.</p> 4.0 2026-11-01T15:00:49 <p>Information published.</p> 2.0 2026-10-25T01:01:43 <p>Information published.</p> 3.0 2026-10-26T14:46:49 <p>Information published.</p> rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak Mariner Linux Yes CVE-2026-98935 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 22276-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:08:40 <p>Information published.</p> 4.0 2026-11-01T15:00:53 <p>Information published.</p> 2.0 2026-10-25T01:01:45 <p>Information published.</p> 3.0 2026-10-26T14:46:52 <p>Information published.</p> perf/core: Check kernel access when kernel callchains are requested Mariner Linux Yes CVE-2026-98937 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 22276-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:08:46 <p>Information published.</p> 4.0 2026-11-01T15:00:58 <p>Information published.</p> 2.0 2026-10-25T01:01:49 <p>Information published.</p> 3.0 2026-10-26T14:47:00 <p>Information published.</p> HID: steam: Clean up locking Mariner Linux Yes CVE-2026-98943 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:09:02 <p>Information published.</p> 2.0 2026-10-25T01:01:55 <p>Information published.</p> 5.0 2026-10-28T01:49:45 <p>Information published.</p> 3.0 2026-10-26T14:47:13 <p>Information published.</p> 4.0 2026-10-27T14:48:45 <p>Information published.</p> HID: steam: Refactor registration Mariner Linux Yes CVE-2026-98944 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.0 4.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H 22276-17084 4.0 4.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:09:05 <p>Information published.</p> 4.0 2026-11-01T15:01:02 <p>Information published.</p> 2.0 2026-10-25T01:01:57 <p>Information published.</p> 3.0 2026-10-26T14:47:17 <p>Information published.</p> HID: steam: Rearrange teardown sequence Mariner Linux Yes CVE-2026-98945 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.6 4.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H 22276-17084 4.6 4.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:09:07 <p>Information published.</p> 4.0 2026-11-01T15:01:06 <p>Information published.</p> 2.0 2026-10-25T01:01:59 <p>Information published.</p> 3.0 2026-10-26T14:47:21 <p>Information published.</p> drm/vc4: Disable the V3D interrupt across runtime suspend Mariner Linux Yes CVE-2026-98946 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:09:11 <p>Information published.</p> 4.0 2026-11-01T15:01:14 <p>Information published.</p> 2.0 2026-10-25T01:02:00 <p>Information published.</p> 3.0 2026-10-26T14:47:25 <p>Information published.</p> vsock: Fix memory leak in vmci_transport_recv_dgram_cb() Mariner Linux Yes CVE-2026-98947 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 2.6 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 22276-17084 2.6 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:09:14 <p>Information published.</p> 4.0 2026-11-01T15:01:20 <p>Information published.</p> 2.0 2026-10-25T01:02:02 <p>Information published.</p> 3.0 2026-10-26T14:47:29 <p>Information published.</p> mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() Mariner Linux Yes CVE-2026-98948 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:09:18 <p>Information published.</p> 4.0 2026-11-01T15:01:26 <p>Information published.</p> 2.0 2026-10-25T01:02:05 <p>Information published.</p> 3.0 2026-10-26T14:47:33 <p>Information published.</p> flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() Mariner Linux Yes CVE-2026-98950 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L 22276-17084 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:09:25 <p>Information published.</p> 4.0 2026-11-01T15:01:30 <p>Information published.</p> 2.0 2026-10-25T01:02:08 <p>Information published.</p> 3.0 2026-10-26T14:47:36 <p>Information published.</p> net: always dissect GSO packets in __virtio_net_hdr_to_skb() Mariner Linux Yes CVE-2026-98954 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:09:37 <p>Information published.</p> 4.0 2026-11-01T15:01:34 <p>Information published.</p> 2.0 2026-10-25T01:02:11 <p>Information published.</p> 3.0 2026-10-26T14:47:44 <p>Information published.</p> flow_dissector: avoid u16 truncation of skb->len when computing thoff Mariner Linux Yes CVE-2026-98955 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L 22276-17084 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:09:40 <p>Information published.</p> 4.0 2026-11-01T15:01:39 <p>Information published.</p> 2.0 2026-10-25T01:02:13 <p>Information published.</p> 3.0 2026-10-26T14:47:49 <p>Information published.</p> btrfs: fix xattr replace when multiple xattrs are packed in the same item Mariner Linux Yes CVE-2026-98959 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 22276-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:09:52 <p>Information published.</p> 4.0 2026-11-01T15:01:43 <p>Information published.</p> 2.0 2026-10-25T01:02:19 <p>Information published.</p> 3.0 2026-10-26T14:48:02 <p>Information published.</p> nvmet: use the local P2P device on metadata allocation failure Mariner Linux Yes CVE-2026-98964 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:06 <p>Information published.</p> 4.0 2026-11-01T15:01:48 <p>Information published.</p> 2.0 2026-10-25T01:02:22 <p>Information published.</p> 3.0 2026-10-26T14:48:06 <p>Information published.</p> bonding: fix the program leak when XDP is replaced Mariner Linux Yes CVE-2026-98966 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:12 <p>Information published.</p> 4.0 2026-11-01T15:01:52 <p>Information published.</p> 2.0 2026-10-25T01:02:24 <p>Information published.</p> 3.0 2026-10-26T14:48:10 <p>Information published.</p> net/sched: em_text: reject unterminated algo before autoload Mariner Linux Yes CVE-2026-98969 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 22276-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:21 <p>Information published.</p> 4.0 2026-11-01T15:01:56 <p>Information published.</p> 2.0 2026-10-25T01:02:31 <p>Information published.</p> 3.0 2026-10-26T14:48:22 <p>Information published.</p> drm/vc4: Free the BO cache size list on teardown Mariner Linux Yes CVE-2026-98970 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:23 <p>Information published.</p> 4.0 2026-11-01T15:02:00 <p>Information published.</p> 2.0 2026-10-25T01:02:32 <p>Information published.</p> 3.0 2026-10-26T14:48:26 <p>Information published.</p> gpio: exar: initialize the ID before registering its cleanup Mariner Linux Yes CVE-2026-98971 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 3.0 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L 22276-17084 3.0 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:26 <p>Information published.</p> 4.0 2026-11-01T15:02:05 <p>Information published.</p> 2.0 2026-10-25T01:02:35 <p>Information published.</p> 3.0 2026-10-26T14:48:30 <p>Information published.</p> cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() Mariner Linux Yes CVE-2026-98972 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:29 <p>Information published.</p> 4.0 2026-11-01T15:02:09 <p>Information published.</p> 2.0 2026-10-25T01:02:37 <p>Information published.</p> 3.0 2026-10-26T14:48:35 <p>Information published.</p> xfs: stop exchanging reflink flags when exchanging mappings Mariner Linux Yes CVE-2026-98975 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L 22276-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:35 <p>Information published.</p> 4.0 2026-11-01T15:02:14 <p>Information published.</p> 2.0 2026-10-25T01:02:38 <p>Information published.</p> 3.0 2026-10-26T14:48:39 <p>Information published.</p> namespace: handle mount locking for automounts correctly Mariner Linux Yes CVE-2026-98977 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.2 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L 22276-17084 4.2 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:38 <p>Information published.</p> 4.0 2026-11-01T15:02:19 <p>Information published.</p> 2.0 2026-10-25T01:02:40 <p>Information published.</p> 3.0 2026-10-26T14:48:43 <p>Information published.</p> namespace: never expire a locked mount Mariner Linux Yes CVE-2026-98978 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 8.4 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N 22276-17084 8.4 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:41 <p>Information published.</p> 4.0 2026-11-01T15:02:23 <p>Information published.</p> 2.0 2026-10-25T01:02:42 <p>Information published.</p> 3.0 2026-10-26T14:48:47 <p>Information published.</p> namespace: refuse an automount below a mount that is in no namespace Mariner Linux Yes CVE-2026-98979 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:44 <p>Information published.</p> 4.0 2026-11-01T15:02:28 <p>Information published.</p> 2.0 2026-10-25T01:02:44 <p>Information published.</p> 3.0 2026-10-26T14:48:51 <p>Information published.</p> namei: don't reveal overmounted entries in refwalk Mariner Linux Yes CVE-2026-98980 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N 22276-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:46 <p>Information published.</p> 4.0 2026-11-01T15:02:32 <p>Information published.</p> 2.0 2026-10-25T01:02:46 <p>Information published.</p> 3.0 2026-10-26T14:48:54 <p>Information published.</p> namespace: unhash a dentry before detaching the mounts on it Mariner Linux Yes CVE-2026-98981 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 22276-17084 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:50 <p>Information published.</p> 4.0 2026-11-01T15:02:37 <p>Information published.</p> 2.0 2026-10-25T01:02:48 <p>Information published.</p> 3.0 2026-10-26T14:48:58 <p>Information published.</p> dcache: don't put a mountpoint on a dentry that's being removed Mariner Linux Yes CVE-2026-98984 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 22276-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:10:58 <p>Information published.</p> 4.0 2026-11-01T15:02:41 <p>Information published.</p> 2.0 2026-10-25T01:02:49 <p>Information published.</p> 3.0 2026-10-26T14:49:03 <p>Information published.</p> namespace: check the mounts before reading their parents in pivot_root() Mariner Linux Yes CVE-2026-98985 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 1.0 2026-10-24T01:11:01 <p>Information published.</p> 3.0 2026-10-26T14:45:23 <p>Information published.</p> 4.0 2026-11-01T15:02:45 <p>Information published.</p> 2.0 2026-10-25T01:02:51 <p>Information published.</p> namespace: check a recursive bind mount for mount namespace loops Mariner Linux Yes CVE-2026-98989 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:45:27 <p>Information published.</p> 4.0 2026-11-01T15:02:50 <p>Information published.</p> 2.0 2026-10-26T01:04:01 <p>Information published.</p> 1.0 2026-10-25T01:02:54 <p>Information published.</p> namespace: check a submount for references right before unmounting it Mariner Linux Yes CVE-2026-98990 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:45:31 <p>Information published.</p> 4.0 2026-11-01T15:02:55 <p>Information published.</p> 2.0 2026-10-26T01:04:03 <p>Information published.</p> 1.0 2026-10-25T01:02:56 <p>Information published.</p> namespace: don't copy an unmounted mount tree Mariner Linux Yes CVE-2026-98992 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:45:36 <p>Information published.</p> 4.0 2026-11-01T15:02:59 <p>Information published.</p> 2.0 2026-10-26T01:04:08 <p>Information published.</p> 1.0 2026-10-25T01:02:58 <p>Information published.</p> namespace: don't inherit MNT_UMOUNT in clone_mnt() Mariner Linux Yes CVE-2026-98993 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 22276-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:45:41 <p>Information published.</p> 4.0 2026-11-01T15:03:04 <p>Information published.</p> 2.0 2026-10-26T01:04:10 <p>Information published.</p> 1.0 2026-10-25T01:03:01 <p>Information published.</p> fs: don't silently unmount busy mounts Mariner Linux Yes CVE-2026-98996 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 22276-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:45:46 <p>Information published.</p> 4.0 2026-11-01T15:03:08 <p>Information published.</p> 2.0 2026-10-26T01:04:15 <p>Information published.</p> 1.0 2026-10-25T01:03:03 <p>Information published.</p> drm/vmwgfx: validate pitch coming from userspace Mariner Linux Yes CVE-2026-99002 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 22276-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:45:49 <p>Information published.</p> 4.0 2026-11-01T15:03:12 <p>Information published.</p> 2.0 2026-10-26T01:04:26 <p>Information published.</p> 1.0 2026-10-25T01:03:06 <p>Information published.</p> drm/i915/gt: Unmask interrupts only when ACTIVE is true Mariner Linux Yes CVE-2026-99005 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 22276-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:45:54 <p>Information published.</p> 4.0 2026-11-01T15:03:17 <p>Information published.</p> 2.0 2026-10-25T01:04:05 <p>Information published.</p> 1.0 2026-10-25T01:03:09 <p>Information published.</p> drm/i915/gem: Prevent overstepping exec array boundary Mariner Linux Yes CVE-2026-99006 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 22276-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:45:58 <p>Information published.</p> 4.0 2026-11-01T15:03:21 <p>Information published.</p> 2.0 2026-10-25T01:04:07 <p>Information published.</p> 1.0 2026-10-25T01:03:11 <p>Information published.</p> drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN Mariner Linux Yes CVE-2026-99007 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 22276-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:46:03 <p>Information published.</p> 4.0 2026-11-01T15:03:26 <p>Information published.</p> 2.0 2026-10-25T01:04:09 <p>Information published.</p> 1.0 2026-10-25T01:03:13 <p>Information published.</p> Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown Mariner Linux Yes CVE-2026-99008 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:46:07 <p>Information published.</p> 4.0 2026-11-01T15:03:30 <p>Information published.</p> 2.0 2026-10-25T01:04:13 <p>Information published.</p> 1.0 2026-10-25T01:03:16 <p>Information published.</p> Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex Mariner Linux Yes CVE-2026-99009 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:46:11 <p>Information published.</p> 4.0 2026-11-01T15:03:35 <p>Information published.</p> 2.0 2026-10-25T01:04:15 <p>Information published.</p> 1.0 2026-10-25T01:03:19 <p>Information published.</p> Bluetooth: RFCOMM: free the skb when the DLC has no owner Mariner Linux Yes CVE-2026-99010 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 22276-17084 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:46:16 <p>Information published.</p> 4.0 2026-11-01T15:03:41 <p>Information published.</p> 2.0 2026-10-25T01:04:17 <p>Information published.</p> 1.0 2026-10-25T01:03:22 <p>Information published.</p> Bluetooth: hci_sock: Serialize dead-device detachment Mariner Linux Yes CVE-2026-99015 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 22276-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:46:23 <p>Information published.</p> 4.0 2026-11-01T15:03:45 <p>Information published.</p> 2.0 2026-10-25T01:04:31 <p>Information published.</p> 1.0 2026-10-25T01:03:27 <p>Information published.</p> regulator: of: fill in supply names in of_regulator_bulk_get_all() Mariner Linux Yes CVE-2026-99021 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:46:32 <p>Information published.</p> 4.0 2026-11-01T15:03:50 <p>Information published.</p> 2.0 2026-10-25T01:04:46 <p>Information published.</p> 1.0 2026-10-25T01:03:35 <p>Information published.</p> openvswitch: fix soft lockup in the netlink flow dump Mariner Linux Yes CVE-2026-99025 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:46:46 <p>Information published.</p> 4.0 2026-11-01T15:03:55 <p>Information published.</p> 2.0 2026-10-25T01:04:52 <p>Information published.</p> 1.0 2026-10-25T01:03:45 <p>Information published.</p> net: bridge: avoid recursive multicast port cleanup Mariner Linux Yes CVE-2026-99031 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:46:58 <p>Information published.</p> 4.0 2026-11-01T15:04:01 <p>Information published.</p> 2.0 2026-10-25T01:05:05 <p>Information published.</p> 1.0 2026-10-25T01:03:52 <p>Information published.</p> net/smc: protect clcsock lifetime in smc_getname Mariner Linux Yes CVE-2026-99032 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 22276-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:47:02 <p>Information published.</p> 4.0 2026-11-01T15:04:05 <p>Information published.</p> 2.0 2026-10-25T01:05:07 <p>Information published.</p> 1.0 2026-10-25T01:03:54 <p>Information published.</p> net/packet: guard the ll header push in packet_rcv_spkt() Mariner Linux Yes CVE-2026-99033 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:47:07 <p>Information published.</p> 4.0 2026-11-01T15:04:10 <p>Information published.</p> 2.0 2026-10-25T01:05:09 <p>Information published.</p> 1.0 2026-10-25T01:03:57 <p>Information published.</p> mmc: sdhci-sprd: disable runtime PM on remove Mariner Linux Yes CVE-2026-99034 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:47:11 <p>Information published.</p> 4.0 2026-11-01T15:04:15 <p>Information published.</p> 2.0 2026-10-25T01:05:11 <p>Information published.</p> 1.0 2026-10-25T01:04:01 <p>Information published.</p> mmc: mtk-sd: Cancel request timeout work on remove Mariner Linux Yes CVE-2026-99035 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:47:15 <p>Information published.</p> 4.0 2026-11-01T15:04:20 <p>Information published.</p> 2.0 2026-10-25T01:05:13 <p>Information published.</p> 1.0 2026-10-25T01:04:04 <p>Information published.</p> dm: fix reading free memory in do_resume Mariner Linux Yes CVE-2026-99036 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:47:19 <p>Information published.</p> 4.0 2026-11-01T15:04:24 <p>Information published.</p> 2.0 2026-10-25T01:05:15 <p>Information published.</p> 1.0 2026-10-25T01:04:08 <p>Information published.</p> dm-crypt: reject the lmk IV mode with AEAD ciphers Mariner Linux Yes CVE-2026-99037 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H 22276-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:47:23 <p>Information published.</p> 4.0 2026-11-01T15:04:29 <p>Information published.</p> 2.0 2026-10-25T01:05:16 <p>Information published.</p> 1.0 2026-10-25T01:04:14 <p>Information published.</p> memstick: core: wait for request completion before freeing card Mariner Linux Yes CVE-2026-99039 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 22276-17084 5.7 5.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:47:31 <p>Information published.</p> 4.0 2026-11-01T15:04:33 <p>Information published.</p> 2.0 2026-10-25T01:05:20 <p>Information published.</p> 1.0 2026-10-25T01:04:18 <p>Information published.</p> KEYS: Fix add_key() race with keyring restriction Mariner Linux Yes CVE-2026-99040 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:47:34 <p>Information published.</p> 4.0 2026-11-01T15:04:44 <p>Information published.</p> 2.0 2026-10-25T01:05:22 <p>Information published.</p> 1.0 2026-10-25T01:04:21 <p>Information published.</p> ip6_gre: remove obsolete ERSPAN PMTU update Mariner Linux Yes CVE-2026-99041 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:47:38 <p>Information published.</p> 4.0 2026-11-01T15:04:48 <p>Information published.</p> 2.0 2026-10-25T01:05:24 <p>Information published.</p> 1.0 2026-10-25T01:04:25 <p>Information published.</p> ice: fix metadata_dst refcount handling on representor teardown Mariner Linux Yes CVE-2026-99043 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:47:42 <p>Information published.</p> 4.0 2026-11-01T15:04:53 <p>Information published.</p> 2.0 2026-10-25T01:05:26 <p>Information published.</p> 1.0 2026-10-25T01:04:30 <p>Information published.</p> gpio: xilinx: fix runtime PM leak on request error path Mariner Linux Yes CVE-2026-99049 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:47:52 <p>Information published.</p> 4.0 2026-11-01T15:04:58 <p>Information published.</p> 2.0 2026-10-25T01:05:40 <p>Information published.</p> 1.0 2026-10-25T01:04:36 <p>Information published.</p> selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts Mariner Linux Yes CVE-2026-99052 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N 22276-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:47:56 <p>Information published.</p> 4.0 2026-11-01T15:05:03 <p>Information published.</p> 2.0 2026-10-25T01:05:42 <p>Information published.</p> 1.0 2026-10-25T01:04:39 <p>Information published.</p> tipc: hold a reference to nodes found by link name Mariner Linux Yes CVE-2026-99053 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 22276-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:01 <p>Information published.</p> 4.0 2026-11-01T15:05:08 <p>Information published.</p> 2.0 2026-10-25T01:05:44 <p>Information published.</p> 1.0 2026-10-25T01:04:41 <p>Information published.</p> tipc: destroy topsrv workqueues before closing connections Mariner Linux Yes CVE-2026-99054 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 22276-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:04 <p>Information published.</p> 4.0 2026-11-01T15:05:12 <p>Information published.</p> 2.0 2026-10-25T01:05:45 <p>Information published.</p> 1.0 2026-10-25T01:04:44 <p>Information published.</p> strparser: make sure __strp_recv isn't running before tearing down the parser Mariner Linux Yes CVE-2026-99056 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 22276-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:08 <p>Information published.</p> 4.0 2026-11-01T15:05:18 <p>Information published.</p> 2.0 2026-10-25T01:05:50 <p>Information published.</p> 1.0 2026-10-25T01:04:46 <p>Information published.</p> xen/netfront: don't leak the skb when xennet_fill_frags() fails Mariner Linux Yes CVE-2026-99057 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.5 4.5 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.5 4.5 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:12 <p>Information published.</p> 4.0 2026-11-01T15:05:23 <p>Information published.</p> 2.0 2026-10-25T01:05:52 <p>Information published.</p> 1.0 2026-10-25T01:04:49 <p>Information published.</p> workqueue: Fix NULL current_pwq deref in chained work check Mariner Linux Yes CVE-2026-99058 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:17 <p>Information published.</p> 4.0 2026-11-01T15:05:27 <p>Information published.</p> 2.0 2026-10-25T01:05:54 <p>Information published.</p> 1.0 2026-10-25T01:04:51 <p>Information published.</p> wireguard: noise: reject response consumption after intermediate initiation Mariner Linux Yes CVE-2026-99059 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 7.7 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L 22276-17084 7.7 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:21 <p>Information published.</p> 4.0 2026-11-01T15:05:33 <p>Information published.</p> 2.0 2026-10-25T01:05:56 <p>Information published.</p> 1.0 2026-10-25T01:04:53 <p>Information published.</p> wifi: brcmfmac: fix P2P device removal race in brcmf_detach() Mariner Linux Yes CVE-2026-99061 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:24 <p>Information published.</p> 4.0 2026-11-01T15:05:39 <p>Information published.</p> 2.0 2026-10-25T01:06:01 <p>Information published.</p> 1.0 2026-10-25T01:04:55 <p>Information published.</p> dm ioctl: don't let data_start run past the buffer Mariner Linux Yes CVE-2026-99063 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N 22276-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:29 <p>Information published.</p> 4.0 2026-11-01T15:05:45 <p>Information published.</p> 2.0 2026-10-25T01:06:06 <p>Information published.</p> 1.0 2026-10-25T01:04:58 <p>Information published.</p> btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() Mariner Linux Yes CVE-2026-99067 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:33 <p>Information published.</p> 4.0 2026-11-01T15:05:51 <p>Information published.</p> 2.0 2026-10-25T01:06:13 <p>Information published.</p> 1.0 2026-10-25T01:05:01 <p>Information published.</p> ipv6: do not warn on route notification size race Mariner Linux Yes CVE-2026-99070 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:37 <p>Information published.</p> 4.0 2026-11-01T15:05:55 <p>Information published.</p> 2.0 2026-10-25T01:06:22 <p>Information published.</p> 1.0 2026-10-25T01:05:04 <p>Information published.</p> ipv4: do not warn on route notification size race Mariner Linux Yes CVE-2026-99071 22276-17084 21932-17084 22276-17084 21932-17084 Low 22276-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:41 <p>Information published.</p> 4.0 2026-11-01T15:06:00 <p>Information published.</p> 2.0 2026-10-25T01:06:25 <p>Information published.</p> 1.0 2026-10-25T01:05:06 <p>Information published.</p> ipv4: stop route notification sizing when nexthop group shrinks Mariner Linux Yes CVE-2026-99072 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:46 <p>Information published.</p> 4.0 2026-11-01T15:06:05 <p>Information published.</p> 2.0 2026-10-25T01:06:27 <p>Information published.</p> 1.0 2026-10-25T01:05:09 <p>Information published.</p> ipv6: udp: Create exceptions before socket matching Mariner Linux Yes CVE-2026-99076 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 22276-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:50 <p>Information published.</p> 4.0 2026-11-01T15:06:10 <p>Information published.</p> 2.0 2026-10-25T01:06:36 <p>Information published.</p> 1.0 2026-10-25T01:05:11 <p>Information published.</p> ipv4: udp: Create exceptions before socket matching Mariner Linux Yes CVE-2026-99077 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 22276-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:54 <p>Information published.</p> 4.0 2026-11-01T15:06:17 <p>Information published.</p> 2.0 2026-10-25T01:06:38 <p>Information published.</p> 1.0 2026-10-25T01:05:13 <p>Information published.</p> net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry Mariner Linux Yes CVE-2026-99078 22276-17084 21932-17084 22276-17084 21932-17084 Critical 22276-17084 Critical 21932-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 22276-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:48:58 <p>Information published.</p> 4.0 2026-11-01T15:06:21 <p>Information published.</p> 2.0 2026-10-25T01:06:43 <p>Information published.</p> 1.0 2026-10-25T01:05:15 <p>Information published.</p> net/mlx5e: Prevent stale XSK buffer release on refill retry Mariner Linux Yes CVE-2026-99079 22276-17084 21932-17084 22276-17084 21932-17084 Critical 22276-17084 Critical 21932-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 22276-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:49:03 <p>Information published.</p> 2.0 2026-10-25T01:06:45 <p>Information published.</p> 4.0 2026-11-01T14:45:16 <p>Information published.</p> 1.0 2026-10-25T01:05:18 <p>Information published.</p> fs: Free any excess xarray nodes in clear_inode() Mariner Linux Yes CVE-2026-99080 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:49:06 <p>Information published.</p> 2.0 2026-10-25T01:06:48 <p>Information published.</p> 4.0 2026-11-01T14:45:22 <p>Information published.</p> 1.0 2026-10-25T01:05:20 <p>Information published.</p> bnxt_en: fix DMA mapping length for padded small packets Mariner Linux Yes CVE-2026-99081 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22276-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:49:10 <p>Information published.</p> 2.0 2026-10-25T01:06:50 <p>Information published.</p> 4.0 2026-11-01T14:45:27 <p>Information published.</p> 1.0 2026-10-25T01:05:23 <p>Information published.</p> KVM: x86: Use active memslots for the per-vCPU MMIO cache Mariner Linux Yes CVE-2026-99082 22276-17084 21932-17084 22276-17084 21932-17084 Important 22276-17084 Important 21932-17084 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 22276-17084 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:49:16 <p>Information published.</p> 2.0 2026-10-25T01:06:53 <p>Information published.</p> 4.0 2026-11-01T14:45:31 <p>Information published.</p> 1.0 2026-10-25T01:05:25 <p>Information published.</p> dm-integrity: fix NULL pointer dereference when the 'R' flag is used Mariner Linux Yes CVE-2026-99087 22276-17084 21932-17084 22276-17084 21932-17084 Moderate 22276-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 22276-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 21932-17084 Release Notes 3.0 2026-10-26T14:49:24 <p>Information published.</p> 2.0 2026-10-25T01:07:05 <p>Information published.</p> 4.0 2026-11-01T14:45:36 <p>Information published.</p> 1.0 2026-10-25T01:05:30 <p>Information published.</p> net: openvswitch: validate transport header presence in set_ipv6_addr Mariner Linux Yes CVE-2026-99088 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-27T01:03:48 <p>Information published.</p> 2.0 2026-10-28T01:01:31 <p>Information published.</p> 3.0 2026-11-01T14:46:04 <p>Information published.</p> drm/amdgpu: serialize vblank counter reads against GPU reset Mariner Linux Yes CVE-2026-99090 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-27T01:03:53 <p>Information published.</p> 2.0 2026-10-28T01:01:38 <p>Information published.</p> 3.0 2026-11-01T14:46:08 <p>Information published.</p> drm/vc4: drain the hangcheck timer and works on V3D unbind Mariner Linux Yes CVE-2026-99095 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-27T01:04:03 <p>Information published.</p> 2.0 2026-10-28T01:01:42 <p>Information published.</p> 3.0 2026-11-01T14:46:14 <p>Information published.</p> wifi: p54: validate firmware record lengths Mariner Linux Yes CVE-2026-99100 21932-17084 22276-17084 21932-17084 22276-17084 Critical 21932-17084 Critical 22276-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:01:41 <p>Information published.</p> 2.0 2026-11-01T14:46:39 <p>Information published.</p> ntfs: move attribute payload before shrinking its record Mariner Linux Yes CVE-2026-99101 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 22276-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes Release Notes 22276-17084 Security Update 6.6.159.1-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22276-17084 Release Notes 3.0 2026-11-04T14:44:51 <p>Information published.</p> 1.0 2026-10-29T01:03:21 <p>Information published.</p> 2.0 2026-11-01T14:47:06 <p>Information published.</p> drm/amdgpu: free the userptr ranges when a CS fails after parser_bos Mariner Linux Yes CVE-2026-99106 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:03:26 <p>Information published.</p> 2.0 2026-11-01T14:47:10 <p>Information published.</p> smb: client: reject SetEA requests that do not fit the request buffer Mariner Linux Yes CVE-2026-99109 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:03:31 <p>Information published.</p> 2.0 2026-11-01T14:47:14 <p>Information published.</p> smb: client: fix heap overflow in cifs_do_set_acl() Mariner Linux Yes CVE-2026-99110 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:03:37 <p>Information published.</p> 2.0 2026-11-01T14:47:19 <p>Information published.</p> net/sched: cls_flower: validate mask pointer after nla_next() Mariner Linux Yes CVE-2026-99112 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:03:42 <p>Information published.</p> 2.0 2026-11-01T14:48:14 <p>Information published.</p> ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in Mariner Linux Yes CVE-2026-99113 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N 21932-17084 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:03:47 <p>Information published.</p> 2.0 2026-11-01T14:48:18 <p>Information published.</p> ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION Mariner Linux Yes CVE-2026-99114 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N 21932-17084 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:03:54 <p>Information published.</p> 2.0 2026-11-01T14:48:24 <p>Information published.</p> ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION Mariner Linux Yes CVE-2026-99115 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N 21932-17084 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:03:59 <p>Information published.</p> 2.0 2026-11-01T14:48:29 <p>Information published.</p> net: bridge: mcast: don't truncate the port group walk on teardown Mariner Linux Yes CVE-2026-99117 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:04:04 <p>Information published.</p> 2.0 2026-11-01T14:48:33 <p>Information published.</p> drm/i915/dmc: Harden DMC firmware payload parsing Mariner Linux Yes CVE-2026-99118 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:04:09 <p>Information published.</p> 2.0 2026-11-01T14:48:39 <p>Information published.</p> ipv4: avoid divide by zero in fib_rebalance Mariner Linux Yes CVE-2026-99121 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:04:13 <p>Information published.</p> 2.0 2026-11-01T14:48:44 <p>Information published.</p> vsock/vmci: validate packet source for connected sockets Mariner Linux Yes CVE-2026-99122 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:04:18 <p>Information published.</p> 2.0 2026-11-01T14:48:49 <p>Information published.</p> vsock/virtio: validate packet source for connected sockets Mariner Linux Yes CVE-2026-99123 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21932-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:04:23 <p>Information published.</p> 2.0 2026-11-01T14:48:55 <p>Information published.</p> s390/pci: Fix leak of uninitialized kernel data in SCLP report Mariner Linux Yes CVE-2026-99124 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:04:29 <p>Information published.</p> 2.0 2026-11-01T14:48:59 <p>Information published.</p> s390/ctcm: Prevent XID null dereference Mariner Linux Yes CVE-2026-99126 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.5 6.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 6.5 6.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:04:33 <p>Information published.</p> 2.0 2026-11-01T14:49:04 <p>Information published.</p> page_pool: keep frag_offset aligned for odd-sized requests Mariner Linux Yes CVE-2026-99127 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:04:38 <p>Information published.</p> 2.0 2026-11-01T14:49:08 <p>Information published.</p> sctp: validate chunk length in the inqueue parser Mariner Linux Yes CVE-2026-99128 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:04:43 <p>Information published.</p> 2.0 2026-11-01T14:49:13 <p>Information published.</p> io_uring/cancel: don't spin on local work the task can't run Mariner Linux Yes CVE-2026-99130 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:04:47 <p>Information published.</p> 2.0 2026-11-01T14:49:18 <p>Information published.</p> xfs: fix capability check in xfs Mariner Linux Yes CVE-2026-99131 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 21932-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:04:52 <p>Information published.</p> 2.0 2026-11-01T14:49:24 <p>Information published.</p> xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf Mariner Linux Yes CVE-2026-99132 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:04:56 <p>Information published.</p> 2.0 2026-11-01T14:49:29 <p>Information published.</p> net/iucv: fix the recvmsg window update Mariner Linux Yes CVE-2026-99133 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:05:01 <p>Information published.</p> 2.0 2026-11-01T14:49:35 <p>Information published.</p> dm-integrity: fix infinite loop on discard with large tag size Mariner Linux Yes CVE-2026-99135 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:05:06 <p>Information published.</p> 2.0 2026-11-01T14:49:42 <p>Information published.</p> dm-crypt: fix a tiny race condition in crypt_dec_pending Mariner Linux Yes CVE-2026-99136 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:05:10 <p>Information published.</p> 2.0 2026-11-01T14:49:47 <p>Information published.</p> tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO) Mariner Linux Yes CVE-2026-99138 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:05:16 <p>Information published.</p> 2.0 2026-11-01T14:49:55 <p>Information published.</p> tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION) Mariner Linux Yes CVE-2026-99139 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:05:21 <p>Information published.</p> 2.0 2026-11-01T14:50:00 <p>Information published.</p> tracing: Fix hist trigger timestamps for buffered events Mariner Linux Yes CVE-2026-99140 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:05:26 <p>Information published.</p> 2.0 2026-11-01T14:50:05 <p>Information published.</p> tracing: Check operator stack capacity before pushing Mariner Linux Yes CVE-2026-99142 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:05:31 <p>Information published.</p> 2.0 2026-11-01T14:50:09 <p>Information published.</p> tracing: Keep the predicate limit separate from program capacity Mariner Linux Yes CVE-2026-99143 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:05:36 <p>Information published.</p> 2.0 2026-11-01T14:50:13 <p>Information published.</p> drm/i915/dmc: Add sanity check for DMC load address Mariner Linux Yes CVE-2026-99146 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.0 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L 21932-17084 3.0 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:05:41 <p>Information published.</p> 2.0 2026-11-01T14:50:18 <p>Information published.</p> drm/exec: don't immediately add prelocked obj to array of locked objs Mariner Linux Yes CVE-2026-99147 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:05:49 <p>Information published.</p> 2.0 2026-11-01T14:50:24 <p>Information published.</p> drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr Mariner Linux Yes CVE-2026-99150 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:05:56 <p>Information published.</p> 2.0 2026-11-01T14:50:30 <p>Information published.</p> scsi: libiscsi: Validate the task named by a management response Mariner Linux Yes CVE-2026-99152 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:06:01 <p>Information published.</p> 2.0 2026-11-01T14:50:39 <p>Information published.</p> scsi: libiscsi: Validate the ITT reflected in a Reject PDU Mariner Linux Yes CVE-2026-99153 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:06:08 <p>Information published.</p> 2.0 2026-11-01T14:50:43 <p>Information published.</p> scsi: libiscsi: Reject a negative task index from parse_pdu_itt Mariner Linux Yes CVE-2026-99154 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:06:13 <p>Information published.</p> 2.0 2026-11-01T14:50:49 <p>Information published.</p> scsi: xen/scsifront: Check for a NULL shadow entry on a backend response Mariner Linux Yes CVE-2026-99155 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:06:18 <p>Information published.</p> 2.0 2026-11-01T14:50:54 <p>Information published.</p> scsi: st: Fix use-after-free race between st_remove() and st_open() Mariner Linux Yes CVE-2026-99156 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:06:23 <p>Information published.</p> 2.0 2026-11-01T14:50:58 <p>Information published.</p> scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies Mariner Linux Yes CVE-2026-99157 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:06:29 <p>Information published.</p> 2.0 2026-11-01T14:51:03 <p>Information published.</p> i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() Mariner Linux Yes CVE-2026-99161 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:06:36 <p>Information published.</p> 2.0 2026-11-01T14:51:08 <p>Information published.</p> tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields Mariner Linux Yes CVE-2026-99163 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:06:42 <p>Information published.</p> 2.0 2026-11-01T14:51:12 <p>Information published.</p> sctp: revalidate output stream after association connect wait Mariner Linux Yes CVE-2026-99165 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:06:47 <p>Information published.</p> 2.0 2026-11-01T14:51:17 <p>Information published.</p> net: rds: fix uninitialized trans dereference in CM event handler Mariner Linux Yes CVE-2026-99166 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:06:52 <p>Information published.</p> 2.0 2026-11-01T14:51:21 <p>Information published.</p> net/sched: fix use-after-free in __tcf_action_put() Mariner Linux Yes CVE-2026-99167 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:06:59 <p>Information published.</p> 2.0 2026-11-01T14:51:26 <p>Information published.</p> futex: Fix mm reuse handling for FUT_OFF_MMSHARED Mariner Linux Yes CVE-2026-99169 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:07:04 <p>Information published.</p> 2.0 2026-11-01T14:51:30 <p>Information published.</p> ntfs3: free the sbi after a grace period Mariner Linux Yes CVE-2026-99171 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:07:09 <p>Information published.</p> 2.0 2026-11-01T14:51:34 <p>Information published.</p> ipc: drop the mqueue mount with kern_unmount() on setup failure Mariner Linux Yes CVE-2026-99172 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:07:15 <p>Information published.</p> 2.0 2026-11-01T14:51:39 <p>Information published.</p> ext4: free the sbi after a grace period Mariner Linux Yes CVE-2026-99174 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:07:23 <p>Information published.</p> 2.0 2026-11-01T14:51:44 <p>Information published.</p> KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry Mariner Linux Yes CVE-2026-99176 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:07:32 <p>Information published.</p> 2.0 2026-11-01T14:51:53 <p>Information published.</p> x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context Mariner Linux Yes CVE-2026-99178 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.5 6.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U 21932-17084 6.5 6.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:07:37 <p>Information published.</p> 2.0 2026-11-01T14:51:58 <p>Information published.</p> watch_queue: Fix note pool publication race in watch_queue_set_size() Mariner Linux Yes CVE-2026-99179 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:07:41 <p>Information published.</p> 2.0 2026-11-01T14:52:04 <p>Information published.</p> unicode: free the map after a grace period Mariner Linux Yes CVE-2026-99180 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.0 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.0 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:07:45 <p>Information published.</p> 2.0 2026-11-01T14:52:09 <p>Information published.</p> autofs: ignore notification errors from a replaced pipe Mariner Linux Yes CVE-2026-99181 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:07:51 <p>Information published.</p> 2.0 2026-11-01T14:52:13 <p>Information published.</p> ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture Mariner Linux Yes CVE-2026-99182 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:07:57 <p>Information published.</p> 2.0 2026-11-01T14:52:18 <p>Information published.</p> perf: Fix perf_pmu_migrate_context() leaving events behind Mariner Linux Yes CVE-2026-99187 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:08:04 <p>Information published.</p> 2.0 2026-11-01T14:52:23 <p>Information published.</p> gpio: mxc: fix race between chained IRQ handler install and probe completion Mariner Linux Yes CVE-2026-99189 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:08:09 <p>Information published.</p> 2.0 2026-11-01T14:52:28 <p>Information published.</p> calipso: keep BIG TCP payload_len in calipso_skbuff_setattr() Mariner Linux Yes CVE-2026-99191 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:08:13 <p>Information published.</p> 2.0 2026-11-01T14:52:33 <p>Information published.</p> net: bcmgenet: unshare the skb before writing the control block Mariner Linux Yes CVE-2026-99192 21932-17084 22276-17084 21932-17084 22276-17084 Important 21932-17084 Important 22276-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:08:19 <p>Information published.</p> 2.0 2026-11-01T14:52:38 <p>Information published.</p> netlink: avoid hashing the network namespace pointer Mariner Linux Yes CVE-2026-99201 21932-17084 22276-17084 21932-17084 22276-17084 Low 21932-17084 Low 22276-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U 21932-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:08:23 <p>Information published.</p> 2.0 2026-11-01T14:52:43 <p>Information published.</p> pipe: preserve existing fasync readers on writer setup failure Mariner Linux Yes CVE-2026-99203 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:08:28 <p>Information published.</p> 2.0 2026-11-01T14:53:35 <p>Information published.</p> ocfs2/dlm: Protect the recovery list during debugfs reads Mariner Linux Yes CVE-2026-99204 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:08:33 <p>Information published.</p> 2.0 2026-11-01T14:53:39 <p>Information published.</p> scsi: target: iscsi: Fix race in discovery auth updates Mariner Linux Yes CVE-2026-99206 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:08:38 <p>Information published.</p> 2.0 2026-11-01T14:53:43 <p>Information published.</p> netlink: reset skb headers before unicast and multicast filtering Mariner Linux Yes CVE-2026-99211 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:08:44 <p>Information published.</p> 2.0 2026-11-01T14:53:53 <p>Information published.</p> net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure Mariner Linux Yes CVE-2026-99212 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:08:48 <p>Information published.</p> 2.0 2026-11-01T14:53:58 <p>Information published.</p> vsock: treat TCP_CLOSING as once-established Mariner Linux Yes CVE-2026-99213 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:08:53 <p>Information published.</p> 2.0 2026-11-01T14:54:02 <p>Information published.</p> power: supply: core: prevent unregistering a power supply while a callback runs Mariner Linux Yes CVE-2026-99215 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:08:59 <p>Information published.</p> 2.0 2026-11-01T14:54:07 <p>Information published.</p> Drivers: hv: Don't reset VMBus connection state on error/exit paths Mariner Linux Yes CVE-2026-99216 21932-17084 22276-17084 21932-17084 22276-17084 Moderate 21932-17084 Moderate 22276-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 22276-17084 Release Notes 21932-17084 22276-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 22276-17084 Release Notes 1.0 2026-10-29T01:09:04 <p>Information published.</p> 2.0 2026-11-01T14:54:12 <p>Information published.</p> ipv4: validate checksum_start before completing checksum Mariner Linux Yes CVE-2026-99999 21932-17084 21932-17084 Critical 21932-17084 9.3 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-16T01:07:47 <p>Information published.</p> 4.0 2026-10-21T01:44:06 <p>Information published.</p> 2.0 2026-10-16T14:43:16 <p>Information published.</p> 5.0 2026-10-21T17:27:26 <p>Information published.</p> 3.0 2026-10-18T14:43:39 <p>Information published.</p> Bootstrap - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-236 Mariner drupal Yes CVE-2026-114538 Improper Neutralization of Input During Web Page Generation 22263-17084 22263-17084 Moderate 22263-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 22263-17084 Release Notes 22263-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22263-17084 Release Notes 1.0 2026-10-31T01:01:26 <p>Information published.</p> serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body Mariner VulnCheck Yes CVE-2026-115754 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 19693-17084 19693-17084 Low 19693-17084 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-10-29T01:09:30 <p>Information published.</p> Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body Mariner GitHub_M Yes CVE-2026-115897 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 19693-17084 19693-17084 Low 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-10-29T01:09:35 <p>Information published.</p> adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names Mariner VulnCheck Yes CVE-2026-116137 Interpretation Conflict 19693-17084 19693-17084 Moderate 19693-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-10-29T01:09:25 <p>Information published.</p> CVE-2026-118131 Mariner certcc Yes CVE-2026-118131 21526-17084 21526-17084 Moderate 21526-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21526-17084 Release Notes 21526-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21526-17084 Release Notes 1.0 2026-10-31T01:12:49 <p>Information published.</p> Forge: Certificate signature verified with the issuer's RSA signature scheme Mariner GitHub_M Yes CVE-2026-118774 Improper Verification of Cryptographic Signature 19693-17084 19693-17084 Low 19693-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:02:43 <p>Information published.</p> Forge: ASN.1 OID first arc truncation in asn1.oidToDer Mariner GitHub_M Yes CVE-2026-118775 Integer Overflow or Wraparound 19693-17084 19693-17084 Low 19693-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:06:57 <p>Information published.</p> Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption Mariner GitHub_M Yes CVE-2026-118776 Improper Input Validation 19693-17084 19693-17084 Low 19693-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:08:23 <p>Information published.</p> Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie Mariner GitHub_M Yes CVE-2026-118777 Improperly Controlled Modification of Object Prototype Attributes 19693-17084 19693-17084 Moderate 19693-17084 4.8 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:02:52 <p>Information published.</p> Forge: TLS client crash when the server sends no certificate Mariner GitHub_M Yes CVE-2026-118778 NULL Pointer Dereference 19693-17084 19693-17084 Moderate 19693-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:02:58 <p>Information published.</p> Forge: Regular expression denial of service in PEM decoding (pem.decode) Mariner GitHub_M Yes CVE-2026-118779 Uncontrolled Resource Consumption 19693-17084 19693-17084 Important 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:08:01 <p>Information published.</p> Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store Mariner GitHub_M Yes CVE-2026-118780 Improper Certificate Validation 19693-17084 19693-17084 Low 19693-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:08:37 <p>Information published.</p> Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) Mariner GitHub_M Yes CVE-2026-118781 Loop with Unreachable Exit Condition 19693-17084 19693-17084 Low 19693-17084 2.9 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:08:32 <p>Information published.</p> Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count Mariner GitHub_M Yes CVE-2026-118782 Improper Validation of Integrity Check Value 19693-17084 19693-17084 Important 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:02:38 <p>Information published.</p> open 7.2.0 before 11.0.0 OS Command Injection via PowerShell on Windows Mariner VulnCheck Yes CVE-2026-119025 Improper Neutralization of Special Elements used in an OS Command 19693-17084 19693-17084 Important 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-10-31T01:13:22 <p>Information published.</p> Forge: AES-GCM authentication bypass via unvalidated tagLength option Mariner GitHub_M Yes CVE-2026-119186 Improper Validation of Integrity Check Value 19693-17084 19693-17084 Moderate 19693-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:08:12 <p>Information published.</p> Forge: Denial of service in TLS record processing via call stack exhaustion Mariner GitHub_M Yes CVE-2026-119187 Uncontrolled Recursion 19693-17084 19693-17084 Important 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:08:07 <p>Information published.</p> Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message Mariner GitHub_M Yes CVE-2026-119188 Uncaught Exception 19693-17084 19693-17084 Important 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:08:17 <p>Information published.</p> Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage Mariner GitHub_M Yes CVE-2026-119189 Improper Certificate Validation 19693-17084 19693-17084 Moderate 19693-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:06:52 <p>Information published.</p> Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13 Mariner GitHub_M Yes CVE-2026-119190 Improper Certificate Validation 19693-17084 19693-17084 Important 19693-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:02:33 <p>Information published.</p> Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer Mariner GitHub_M Yes CVE-2026-119191 Uncontrolled Resource Consumption 19693-17084 19693-17084 Important 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-11-03T01:08:28 <p>Information published.</p> SQLite before 3.54.0 Heap Buffer Overflow via Session Extension sessionUpdateFind() Mariner VulnCheck Yes CVE-2026-119379 Out-of-bounds Write 22268-17084 22268-17084 Important 22268-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 22268-17084 Release Notes 22268-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22268-17084 Release Notes 1.0 2026-10-31T01:05:15 <p>Information published.</p> Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose Mariner EEF Yes CVE-2026-65625 Improper Validation of Integrity Check Value 22325-17084 22325-17084 Moderate 22325-17084 Release Notes 22325-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22325-17084 Release Notes 3.0 2026-11-03T01:47:45 <p>Information published.</p> 2.0 2026-11-01T15:05:48 <p>Information published.</p> 1.0 2026-10-31T01:14:04 <p>Information published.</p> Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2 Mariner EEF Yes CVE-2026-65627 Improper Handling of Highly Compressed Data (Data Amplification) 22325-17084 22325-17084 Moderate 22325-17084 Release Notes 22325-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22325-17084 Release Notes 3.0 2026-11-03T01:48:01 <p>Information published.</p> 2.0 2026-11-01T14:56:06 <p>Information published.</p> 1.0 2026-10-31T01:14:17 <p>Information published.</p> Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types Mariner EEF Yes CVE-2026-65628 Uncontrolled Recursion 22325-17084 22325-17084 Moderate 22325-17084 Release Notes 22325-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22325-17084 Release Notes 3.0 2026-11-03T01:49:07 <p>Information published.</p> 2.0 2026-11-01T14:56:11 <p>Information published.</p> 1.0 2026-10-31T01:14:23 <p>Information published.</p> Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose Mariner EEF Yes CVE-2026-65630 Observable Timing Discrepancy 22325-17084 22325-17084 Moderate 22325-17084 Release Notes 22325-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22325-17084 Release Notes 3.0 2026-11-03T01:47:41 <p>Information published.</p> 2.0 2026-11-01T15:05:46 <p>Information published.</p> 1.0 2026-10-31T01:14:01 <p>Information published.</p> Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typic Mariner oracle Yes CVE-2026-83374 Exposure of Sensitive Information to an Unauthorized Actor 19693-17084 19693-17084 Moderate 19693-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 2.0 2026-11-03T01:46:58 <p>Information published.</p> 1.0 2026-10-31T01:13:27 <p>Information published.</p> Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web St Mariner oracle Yes CVE-2026-83380 Exposure of Sensitive Information to an Unauthorized Actor 19693-17084 19693-17084 Moderate 19693-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 2.0 2026-11-03T01:47:20 <p>Information published.</p> 1.0 2026-10-31T01:13:40 <p>Information published.</p> Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from th Mariner oracle Yes CVE-2026-83381 Exposure of Sensitive Information to an Unauthorized Actor 19693-17084 19693-17084 Moderate 19693-17084 4.8 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 2.0 2026-11-03T01:47:02 <p>Information published.</p> 1.0 2026-10-31T01:13:29 <p>Information published.</p> Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients runn Mariner oracle Yes CVE-2026-83387 Exposure of Sensitive Information to an Unauthorized Actor 19693-17084 19693-17084 Moderate 19693-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 2.0 2026-11-03T01:46:53 <p>Information published.</p> 1.0 2026-10-31T01:13:17 <p>Information published.</p> Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup Mariner redhat Yes CVE-2026-86847 Access of Uninitialized Pointer 21900-17084 21900-17084 Moderate 21900-17084 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 21900-17084 Release Notes 21900-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21900-17084 Release Notes 1.0 2026-10-17T01:03:18 <p>Information published.</p> Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running s Mariner oracle Yes CVE-2026-87290 Exposure of Sensitive Information to an Unauthorized Actor 19693-17084 19693-17084 Moderate 19693-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 2.0 2026-11-03T01:47:07 <p>Information published.</p> 1.0 2026-10-31T01:13:32 <p>Information published.</p> Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e. Mariner oracle Yes CVE-2026-87294 Improper Access Control 19693-17084 19693-17084 Moderate 19693-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 2.0 2026-11-03T01:47:15 <p>Information published.</p> 1.0 2026-10-31T01:13:37 <p>Information published.</p> ADV260001 Hardening changes for ReFS volumes on removable media <p>Starting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the <a href="https://learn.microsoft.com/windows-server/storage/refs/refs-overview">Resilient File System (ReFS)</a>. This change is not enable by default until 2027. Please see <a href="https://support.microsoft.com/en-us/servicing/os/windows/docs/2026/10/hardening-changes-for-refs-volumes-on-removable-media">Hardening changes for ReFS volumes on removable media</a> for more information.</p> Windows Resilient File System (ReFS) Microsoft Yes ADV260001 10853 11923 10852 10855 12437 12436 11924 10816 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 Not a Vulnerability 10853 Not a Vulnerability 11923 Not a Vulnerability 10852 Not a Vulnerability 10855 Not a Vulnerability 12437 Not a Vulnerability 12436 Not a Vulnerability 11924 Not a Vulnerability 10816 Not a Vulnerability 11568 Not a Vulnerability 11569 Not a Vulnerability 11571 Not a Vulnerability 11572 Not a Vulnerability 11929 Not a Vulnerability 11930 Not a Vulnerability 11931 Not a Vulnerability 12099 Not a Vulnerability 12098 Not a Vulnerability 12097 Not a Vulnerability 12242 Not a Vulnerability 12243 Not a Vulnerability 12389 Not a Vulnerability 12390 Not a Vulnerability 20437 Not a Vulnerability 20438 Not a Vulnerability 21945 Not a Vulnerability 21946 Not a Vulnerability 20854 Not a Vulnerability 20853 None 10853 None 11923 None 10852 None 10855 None 12437 None 12436 None 11924 None 10816 None 11568 None 11569 None 11571 None 11572 None 11929 None 11930 None 11931 None 12099 None 12098 None 12097 None 12242 None 12243 None 12389 None 12390 None 20437 None 20438 None 21945 None 21946 None 20854 None 20853 Publicly Disclosed:No;Exploited:No Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Service Elevation of Privilege Vulnerability <p>Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Update Service Microsoft Yes CVE-2026-100200 Use After Free 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 insu (@hpy_insu) of Theori, with Xint 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Client License Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Client License Service Microsoft Yes CVE-2026-100201 Heap-based Buffer Overflow Numeric Truncation Error 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://twitter.com/ezrak1e">Ezrak1e</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Message Queuing Queue Manager Remote Code Execution Vulnerability <p>Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could send a specially crafted message over the network to a system running the Windows Message Queuing (MSMQ) service. This message is processed by the MSMQ service and triggers a memory corruption condition, which could allow the attacker to run code on the affected system.</p> Windows Message Queuing Queue Manager Microsoft Yes CVE-2026-100202 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 R4mbb 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Update Service Microsoft Yes CVE-2026-100203 Heap-based Buffer Overflow 21946 12436 12437 20854 20853 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 12389 12390 20437 20438 21945 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 Yuki Chen using GLM from z.ai (https://z.ai) 1.0 2026-10-13T07:00:00 <p>Information published.</p> SysInternals Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> SysInternals Microsoft Yes CVE-2026-100205 Untrusted Pointer Dereference 12190 Elevation of Privilege 12190 Important 12190 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12190 Release Notes https://learn.microsoft.com/sysinternals/downloads/procmon 12190 Yes Security Update v4.04 https://learn.microsoft.com/sysinternals/downloads/procmon 12190 Release Notes <a href="https://github.com/zeze-zeze">Zeze</a> with <a href="https://www.txone.com/">TXOne</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Azure CycleCloud Remote Code Execution Vulnerability <p>Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.</p> <p><strong>Does an attacker need to be authenticated to exploit this vulnerability?</strong></p> <p>An attacker must be authenticated to Azure CycleCloud and have permission to create or manage a cluster and configure a Windows node's credentials. A different user must then use the Azure CycleCloud CLI from a macOS or Linux workstation to connect to the affected node.</p> Azure CycleCloud Microsoft Yes CVE-2026-100207 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 21547 Remote Code Execution 21547 Important 21547 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21547 Release Notes https://marketplace.microsoft.com/en-us/product/azurecyclecloud.azure-cyclecloud?tab=Overview 21547 No Security Update 8.9.2 https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes/8-9-2?view=cyclecloud-8 21547 Release Notes XBREACH TEAM with <a href="https://xbreach.ai/">XBreach.ai</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-100209 Use After Free 12421 12420 11763 11762 11951 12440 21368 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 11951 Critical 12440 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-100210 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 21368 Critical 11951 Critical 12440 Critical 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-100211 Use After Free 11951 12440 21368 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Critical 11951 Critical 12440 Critical 21368 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-100212 Use After Free 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low-level access to an affected server could send a specially crafted request to execute code on the server. User interaction is not required.</p> Dynamics Business Central Microsoft Yes CVE-2026-100214 Deserialization of Untrusted Data 11603-10378 11746-10378 Remote Code Execution 11603-10378 Remote Code Execution 11746-10378 Important 11603-10378 Important 11746-10378 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11603-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11746-10378 Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=108851 5010202 11603-10378 Yes Security Update 30713 https://support.microsoft.com/en-us/servicing/dynamics/nav/update/2021/12/cumulative-update-61-for-microsoft-dynamics-nav-2017-build-30699 11603-10378 Release Notes Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=108852 5022710 11746-10378 Yes Security Update 11.0.50736.0 https://support.microsoft.com/en-gb/servicing/dynamics/nav/update/2022/12/cumulative-update-60-for-microsoft-dynamics-nav-2018-build-49618 11746-10378 Release Notes <a href="https://linkedin.com/in/ielhadi">Ilyass El Hadi</a> with <a href="https://armadin.com/">Armadin</a> <a href="https://www.linkedin.com/in/john-nzyuko-412b563b1/">John Nzyuko</a> <a href="https://linkedin.com/in/ielhadi">Ilyass El Hadi</a> with <a href="https://armadin.com/">Armadin</a> <a href="https://www.linkedin.com/in/wangming13/">Pham Quang Minh</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Graphics Component Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>There are multiple ways an attacker could exploit the vulnerability, such as by either convincing a user to open a specially crafted document, or by convincing a user to visit a webpage that contains specially crafted embedded OpenType fonts. The resulting Remote Code Execution would be within the context of the authenticated local user.</p> Microsoft Graphics Component Microsoft Yes CVE-2026-100215 Heap-based Buffer Overflow 21946 12436 12437 20854 20853 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Critical 10483 Critical 10543 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 12389 12390 20437 20438 21945 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Storage Microsoft Yes CVE-2026-100216 Stack-based Buffer Overflow 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Group Policy Elevation of Privilege Vulnerability <p>Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Group Policy Microsoft Yes CVE-2026-100217 Missing Authorization 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://twitter.com/filip_dragovic">Filip Dragović</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Gateway Service Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Remote Desktop Gateway Service Microsoft Yes CVE-2026-100218 Use After Free 20438 21945 21946 12436 12437 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5127648 https://support.microsoft.com/help/5127648 20438 21945 21946 12389 12390 20437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft QUIC Remote Code Execution Vulnerability <p>Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Microsoft QUIC Microsoft Yes CVE-2026-100219 Use After Free 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Media Video Decoder Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could attempt to exploit this vulnerability by convincing a user to open a specially crafted media file. If the vulnerable component processes the file, memory corruption could occur, which may allow code to run on the affected system.</p> Windows Media Video Decoder Microsoft Yes CVE-2026-100220 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Network Policy Server (NPS) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Network Policy Server (NPS) Microsoft Yes CVE-2026-100222 Heap-based Buffer Overflow Integer Underflow (Wrap or Wraparound) 10378 10379 10483 10543 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10852 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Remote Code Execution 10852 Important 10378 Important 10379 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10852 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Pwnforr777 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Storage Microsoft Yes CVE-2026-100225 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; wgg 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Network File System Information Disclosure Vulnerability <p>Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Network File System Microsoft Yes CVE-2026-102186 Untrusted Pointer Dereference 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 10483 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Thanatos Tian (HKPolyU) &amp; npc0vo with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows Kernel Microsoft Yes CVE-2026-102187 Use of Uninitialized Resource 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 10483 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Port Driver Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Port Driver Microsoft Yes CVE-2026-102188 Untrusted Pointer Dereference 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; wgg with Diffract <a href="https://x.com/tinysecex">fanxiaocao</a> and <a href="https://weibo.com/jfpan">pjf</a> <a href="https://x.com/tinysecex">fanxiaocao</a> and <a href="https://weibo.com/jfpan">pjf</a> 1.1 2026-10-14T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Storage Microsoft Yes CVE-2026-102189 Heap-based Buffer Overflow 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Storage Microsoft Yes CVE-2026-102191 Heap-based Buffer Overflow 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Linzishan <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Failover Cluster Denial of Service Vulnerability <p>Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.</p> Windows Failover Cluster Microsoft Yes CVE-2026-102192 Integer Underflow (Wrap or Wraparound) 11571 11572 11923 11924 12436 12437 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12436 Denial of Service 12437 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-102193 Use After Free 21945 21946 11568 11929 11930 11931 12099 12242 20438 20853 11569 12098 12097 12243 12389 12390 20437 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 20438 Elevation of Privilege 20853 Elevation of Privilege 11569 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11929 Important 11930 Important 11931 Important 12099 Important 12242 Important 20438 Important 20853 Important 11569 Important 12098 Important 12097 Important 12243 Important 12389 Important 12390 Important 20437 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20438 12389 12390 20437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Graphics Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Graphics Kernel Microsoft Yes CVE-2026-102194 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 TunSk & Zhiniang Peng esakis 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-102195 Use After Free 21945 21946 12389 20438 12242 12243 12390 20437 20854 20853 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12389 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 21945 Important 21946 Important 12389 Important 20438 Important 12242 Important 12243 Important 12390 Important 20437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 12389 20438 12390 20437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-102196 Use After Free 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 21945 21946 20854 20853 20438 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 20438 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 21945 Important 21946 Important 20854 Important 20853 Important 20438 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 21945 21946 20438 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-102197 Use After Free 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Remote Desktop Protocol Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Remote Desktop Protocol Microsoft Yes CVE-2026-102198 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Codecs Library Denial of Service Vulnerability <p>Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.</p> Microsoft Windows Codecs Library Microsoft Yes CVE-2026-102199 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 21945 Denial of Service 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-102201 Use After Free 11568 11569 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 11571 11572 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 11571 Elevation of Privilege 11572 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Important 11571 Important 11572 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability <p>Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Microsoft Yes CVE-2026-102202 Improper Link Resolution Before File Access ('Link Following') 11923 11924 20854 20853 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Important 11923 Important 11924 Important 20854 Important 20853 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> RPC Runtime Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> RPC Runtime Microsoft Yes CVE-2026-102203 Access of Resource Using Incompatible Type ('Type Confusion') 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Subsystem for Linux Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Subsystem for Linux Microsoft Yes CVE-2026-102204 Improper Link Resolution Before File Access ('Link Following') 12069 Elevation of Privilege 12069 Important 12069 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12069 Release Notes https://github.com/microsoft/WSL/releases/tag/3.0.1 12069 No Security Update 3.0.1 https://github.com/microsoft/WSL/releases/tag/3.0.1 12069 Release Notes <a href="https://github.com/vealending">Nils Holten</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 2.0 2026-10-20T07:00:00 <p>Updated CVE to relect that this vulnerability is in the Windows Subsystem for Linux product. Microsoft recommends that customer using this product should install the latest version to be protected.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-102205 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC R4nger, mj with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://x.com/m4x_1997">Aobo Wang</a> yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Portable Device MTP Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Portable Device MTP Driver Microsoft Yes CVE-2026-102206 Heap-based Buffer Overflow 12098 11923 11924 12243 12242 12437 20853 20854 12389 12390 20437 20438 21945 21946 12436 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11931 11930 12099 12097 Elevation of Privilege 12098 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 12242 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11931 Elevation of Privilege 11930 Elevation of Privilege 12099 Elevation of Privilege 12097 Important 12098 Important 11923 Important 11924 Important 12243 Important 12242 Important 12437 Important 20853 Important 20854 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11931 Important 11930 Important 12099 Important 12097 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12098 12099 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12098 12099 12097 5126657 5126657 https://support.microsoft.com/help/5126657 12098 11929 11931 11930 12099 12097 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kernel Microsoft Yes CVE-2026-102207 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-102208 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 MSRC VRR 1.1 2026-10-23T07:00:00 <p>Acknowledgement Updated</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Graphics Component Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Microsoft Graphics Component Microsoft Yes CVE-2026-102209 Heap-based Buffer Overflow 20854 20853 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Text Shaping Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Text Shaping Microsoft Yes CVE-2026-102210 Heap-based Buffer Overflow 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability <p>Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Virtualization-Based Security (VBS) Enclave Microsoft Yes CVE-2026-102211 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 10816 10855 11569 11571 11572 11931 12097 11923 11924 12243 12390 20438 21946 12436 12437 20853 10852 11929 10853 12389 20437 21945 20854 12099 12242 11930 11568 12098 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 12390 Elevation of Privilege 20438 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 10852 Elevation of Privilege 11929 Elevation of Privilege 10853 Elevation of Privilege 12389 Elevation of Privilege 20437 Elevation of Privilege 21945 Elevation of Privilege 20854 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 11930 Elevation of Privilege 11568 Elevation of Privilege 12098 Critical 10816 Critical 10855 Critical 11569 Critical 11571 Critical 11572 Critical 11931 Critical 12097 Critical 11923 Critical 11924 Critical 12243 Critical 12390 Critical 20438 Critical 21946 Critical 12436 Critical 12437 Critical 20853 Critical 10852 Critical 11929 Critical 10853 Critical 12389 Critical 20437 Critical 21945 Critical 20854 Critical 12099 Critical 12242 Critical 11930 Critical 11568 Critical 12098 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 10852 10853 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11569 11571 11572 11568 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11569 11571 11572 11568 5126651 5126651 https://support.microsoft.com/help/5126651 11569 11571 11572 11568 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11931 11929 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11931 11929 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11931 12097 11929 12099 11930 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12099 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12099 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 20438 21946 12389 20437 21945 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Remote Code Execution Vulnerability <p>Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>To exploit this vulnerability, an attacker could run a specially crafted application on a Hyper-V guest that could cause the Hyper-V host operating system to execute arbitrary code.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>In this case, a successful attack could be performed from a low privilege Hyper-V guest. The attacker could traverse the guest's security boundary to execute code on the Hyper-V host execution environment.</p> Windows Hyper-V Microsoft Yes CVE-2026-102214 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 21945 Remote Code Execution 21946 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 21945 Critical 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-102215 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 R4nger, mj with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows StateRepository API Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows StateRepository API Microsoft Yes CVE-2026-102216 Access of Resource Using Incompatible Type ('Type Confusion') 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 David Zhu with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> WebDAV Elevation of Privilege Vulnerability <p>Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong> An attacker who successfully exploited this vulnerability could execute code in the security context of the affected IIS application pool.</p> WebDAV Microsoft Yes CVE-2026-102217 Improper Resolution of Path Equivalence 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-102218 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 R4nger, mj with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows VHD miniport driver Elevation of Privilege Vulnerability <p>Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows VHD miniport driver Microsoft Yes CVE-2026-102220 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Secure Boot Security Feature Bypass Vulnerability <p>No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass Secure Boot.</p> Windows Secure Boot Microsoft Yes CVE-2026-102221 Improper Check for Certificate Revocation 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Text Shaping Remote Code Execution Vulnerability <p>Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Windows Text Shaping Microsoft Yes CVE-2026-102225 Out-of-bounds Read Numeric Truncation Error 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 0ccbbf129444eb66344ccafb92b00df4 <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC 1.0 2026-10-13T07:00:00 <p>Information published.</p> Dynamics Business Central Elevation of Privilege Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain the privileges of the user account or service account running the affected process.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low privileges could send specially crafted requests to write files to locations accessible to the affected web application. Successful exploitation could allow the attacker to gain the privileges of the application-pool identity or compromise other users’ sessions.</p> Dynamics Business Central Microsoft Yes CVE-2026-102226 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 11746-10378 Elevation of Privilege 11746-10378 Important 11746-10378 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11746-10378 Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=108852 5022710 11746-10378 Yes Security Update 11.0.50736.0 https://support.microsoft.com/en-gb/servicing/dynamics/nav/update/2022/12/cumulative-update-60-for-microsoft-dynamics-nav-2018-build-49618 11746-10378 Release Notes <a href="https://linkedin.com/in/ielhadi">Ilyass El Hadi</a> with <a href="https://armadin.com/">Armadin</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-102227 Heap-based Buffer Overflow 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126657 https://support.microsoft.com/help/5126657 12099 12098 12097 11929 11930 11931 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 <a href="https://x.com/mochinishimiya">mochizou (@MochiNishimiya)</a> with <a href="https://starlabs.sg/">STAR Labs SG Pte. Ltd.</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-11-02T08:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Visual Studio Code Information Disclosure Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability by escaping the sandbox, is the ability to read local files.</p> Visual Studio Code Microsoft Yes CVE-2026-102229 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 11622 Information Disclosure 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Security Update 1.141.1 https://code.visualstudio.com/updates/v1_141 11622 Release Notes <a href="https://www.linkedin.com/in/marcelkarlsson/">Marcel Karlsson (whoismarcel)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Visual Studio Code Security Feature Bypass Vulnerability <p>Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.</p> <p><strong>What security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass the Visual Studio Code Workspace Trust feature, allowing content from an untrusted workspace to run commands or code without the user first granting trust. See <a href="https://code.visualstudio.com/docs/editor/workspace-trust">Workspace Trust</a> for more information.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> Visual Studio Code Microsoft Yes CVE-2026-102231 Improper Resolution of Path Equivalence 11622 Security Feature Bypass 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.7 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Security Update 1.141.1 https://code.visualstudio.com/updates/v1_141 11622 Release Notes <a href="https://www.linkedin.com/in/jiheun-kim/">l8BL</a> with <a href="https://enki.co.kr/">ENKI WhiteHat</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Visual Studio Code Security Feature Bypass Vulnerability <p>Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.</p> <p><strong>What security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker could supply specially crafted content that an AI coding agent processes. Successful exploitation could allow the attacker to modify a configured lifecycle-hook file without the expected confirmation, which could result in commands executing in the context of the user. User interaction is required to run the agent against attacker-controlled content.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>Exploitation is not trivial for this vulnerability as it requires multiple steps: prompt injection, Copilot Agent interaction, and triggering a build.</p> Visual Studio Code Microsoft Yes CVE-2026-102232 Incorrect Authorization 11622 Security Feature Bypass 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Security Update 1.141.1 https://code.visualstudio.com/updates/v1_141 11622 Release Notes Max van Amersfort 1.0 2026-10-13T07:00:00 <p>Information published.</p> Visual Studio Code Security Feature Bypass Vulnerability <p>Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.</p> <p><strong>What security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass the Visual Studio Code Workspace Trust feature, allowing content from an untrusted workspace to run commands or code without the user first granting trust. See <a href="https://code.visualstudio.com/docs/editor/workspace-trust">Workspace Trust</a> for more information.</p> Visual Studio Code Microsoft Yes CVE-2026-102233 Missing Authorization 11622 Security Feature Bypass 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Security Update 1.141.1 https://code.visualstudio.com/updates/v1_141 11622 Release Notes <a href="https://www.linkedin.com/in/mimoune-tahri/">Chappax</a> with Krativus Inc <a href="https://www.linkedin.com/in/mohit-negi-b9b5711a2/">Mohit_Negi</a> with <a href="https://bugcrowd.com/mohit_negi">RootxLabs</a> Luecine 1.0 2026-10-13T07:00:00 <p>Information published.</p> Visual Studio Code Security Feature Bypass Vulnerability <p>Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass the Visual Studio Code Workspace Trust feature, allowing content from an untrusted workspace to run commands or code without the user first granting trust. See <a href="https://code.visualstudio.com/docs/editor/workspace-trust">Workspace Trust</a> for more information.</p> Visual Studio Code Microsoft Yes CVE-2026-102234 Reliance on Untrusted Inputs in a Security Decision 11622 Security Feature Bypass 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Security Update 1.141.1 https://code.visualstudio.com/updates/v1_141 11622 Release Notes <a href="https://www.linkedin.com/in/đức-nguyễn-văn-minh-19a925287/">Nguyen Van Minh Duc</a> with <a href="https://saigonnewport.com.vn/">Saigon Newport Corporation</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Visual Studio Code Remote Code Execution Vulnerability <p>Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could cause specially crafted content to appear in the Visual Studio Code integrated terminal. If the user clicks the resulting notification link, successful exploitation could allow the attacker to execute commands in the context of the user. Authentication is not required.</p> Visual Studio Code Microsoft Yes CVE-2026-102235 Improper Encoding or Escaping of Output 11622 Remote Code Execution 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Security Update 1.141.1 https://code.visualstudio.com/updates/v1_141 11622 Release Notes <a href="https://www.linkedin.com/in/nguyen-hoang-quoc-an-009863267/">kayiz</a> with <a href="http://lp.com.vn/">Lien Phat Technology Corporation</a> <a href="https://x.com/talfao1">Talfao</a> with <a href="https://codespect.net/">CODESPECT</a> dldil 1.0 2026-10-13T07:00:00 <p>Information published.</p> Visual Studio Code Remote Code Execution Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could convince a user to import a specially crafted Visual Studio Code profile or open specially crafted content or links. Successful exploitation could bypass path-containment checks, allowing access outside intended locations and potentially resulting in code execution in the context of the user.</p> Visual Studio Code Microsoft Yes CVE-2026-102238 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 11622 Remote Code Execution 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Security Update 1.141.1 https://code.visualstudio.com/updates/v1_141 11622 Release Notes <a href="https://rayhan.ch/">Rayhan Destian</a> <a href="https://x.com/vulda17">vulda1</a> with Viettel Cyber Security Matteo Alessio Belcore (killermab3500) 1.0 2026-10-13T07:00:00 <p>Information published.</p> Chromium CVE-2026-102299: Type confusion <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102299 Access of Resource Using Incompatible Type ('Type Confusion') 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102300: Uninitialized resource in WebGPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102300 21955 21955 Important 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102301: Out of bounds write <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102301 Out-of-bounds Write 21955 21955 Important 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102302: Buffer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102302 Stack-based Buffer Overflow 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102303: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102303 Use of Uninitialized Resource 21955 21955 Important 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102304: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102304 Use After Free 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102305: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102305 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102306: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102306 Use After Free 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102307: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102307 Use of Uninitialized Resource 21955 21955 Important 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102308: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102308 Use After Free 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102309: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102309 Use After Free 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102310: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102310 Missing Authorization 21955 21955 Low 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102311: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102311 Use of Uninitialized Resource 21955 21955 Important 21955 3.4 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102312: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102312 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Important 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102313: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102313 Use of Uninitialized Resource 21955 21955 Important 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102314: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102314 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102315: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102315 Use of Uninitialized Resource 21955 21955 Important 21955 3.4 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102316: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102316 Use After Free 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102317: Improper privilege management <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102317 Improper Privilege Management 21955 21955 Important 21955 8.6 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102318: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102318 Out-of-bounds Read 21955 21955 Important 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102319: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102319 Use of Uninitialized Resource 21955 21955 Important 21955 3.4 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102320: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102320 Missing Authorization 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102321: Type confusion <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102321 Access of Resource Using Incompatible Type ('Type Confusion') 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102322: Incorrect Authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102322 Incorrect Authorization 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-102323: Type confusion <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102323 Access of Resource Using Incompatible Type ('Type Confusion') 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102324: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102324 Use After Free 21955 21955 Important 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102325: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102325 Use of Uninitialized Resource 21955 21955 Important 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102326: Type confusion <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102326 Access of Resource Using Incompatible Type ('Type Confusion') 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102327: Incorrect authorization in WebView <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102327 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:50:44 <p>Information published.</p> Chromium CVE-2026-102328: Type confusion <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102328 Access of Resource Using Incompatible Type ('Type Confusion') 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102329: Cross-site scripting <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102329 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 21955 21955 Important 21955 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102330: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102330 Incorrect Authorization 21955 21955 Low 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-102331: Buffer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-102331 Heap-based Buffer Overflow 21955 21955 Critical 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 No Security Update 154.0.4258.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Microsoft Office Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-102849 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-102850 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Visual Studio Code Security Feature Bypass Vulnerability <p>Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could convince a user to add and start a specially crafted sandboxed MCP server alongside another sandboxed server in Visual Studio Code. Successful exploitation could allow the attacker-controlled server to write into the other server's directory, bypassing the per-server sandbox policy and potentially executing code under the other server's permissions. User interaction is required to add and start the servers.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> Visual Studio Code Microsoft Yes CVE-2026-102851 Incorrect Privilege Assignment 11622 Security Feature Bypass 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.1 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Security Update 1.141.1 https://code.visualstudio.com/updates/v1_141 11622 Release Notes <a href="https://imap143.com/">Myungyong Lee</a> thegoldmandm 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Visio Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Visio Microsoft Yes CVE-2026-102855 Heap-based Buffer Overflow 11762 11763 11953 11952 12420 12421 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11953 Remote Code Execution 11952 Remote Code Execution 12420 Remote Code Execution 12421 Critical 11762 Critical 11763 Critical 11953 Critical 11952 Critical 12420 Critical 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11953 11952 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11953 11952 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Visio Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Visio Microsoft Yes CVE-2026-102856 Heap-based Buffer Overflow Integer Overflow or Wraparound 11762 11763 11953 11952 12420 12421 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11953 Remote Code Execution 11952 Remote Code Execution 12420 Remote Code Execution 12421 Critical 11762 Critical 11763 Critical 11953 Critical 11952 Critical 12420 Critical 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11953 11952 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11953 11952 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Visio Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Visio Microsoft Yes CVE-2026-102857 Heap-based Buffer Overflow Off-by-one Error 11762 11763 11953 11952 12420 12421 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11953 Remote Code Execution 11952 Remote Code Execution 12420 Remote Code Execution 12421 Critical 11762 Critical 11763 Critical 11953 Critical 11952 Critical 12420 Critical 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11953 11952 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11953 11952 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office OneNote Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> Microsoft Office OneNote Microsoft Yes CVE-2026-102858 Heap-based Buffer Overflow 11951 12440 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> Microsoft Office SharePoint Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-102859 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11961 Spoofing 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What privileges could an attacker gain with a successful exploitation?</strong></p> <p>Due to default configurations, an unprivileged user could get Site Owner Permissions, allowing the attacker to use this vulnerability to inject arbitrary code into the server.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-102860 Improper Access Control 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>Successful exploitation could allow an attacker to run script in the security context of the affected SharePoint user and perform actions permitted to that user.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-102861 Missing Authorization 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 <a href="https://www.linkedin.com/in/nguyen-hoang-quoc-an-009863267/">kayiz</a> with <a href="http://lp.com.vn/">Lien Phat Technology Corporation</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What privileges could an attacker gain with a successful exploitation?</strong></p> <p>Due to default configurations, an unprivileged user could get Site Owner Permissions, allowing the attacker to use this vulnerability to inject arbitrary code into the server.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-102862 Incorrect Authorization 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could send a specially crafted request to an affected SharePoint server to perform an operation beyond the permissions granted to their account. Successful exploitation could allow the attacker to modify protected content or administrative configuration. No additional user interaction is required.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-102863 Improper Control of Generation of Code ('Code Injection') 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 polidinh 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-102864 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11961 Spoofing 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 P1hcn 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Information Disclosure Vulnerability <p>Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-102865 Incorrect Authorization 11961 Information Disclosure 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 pwnky 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker who obtains a valid proof token for a targeted user could modify the token and submit it to an affected SharePoint server. Successful exploitation could allow the attacker to authenticate as that user and access or modify content available to the compromised account. User interaction is not required.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-102866 Improper Verification of Cryptographic Signature 11961 Elevation of Privilege 11961 Critical 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 <a href="https://www.linkedin.com/in/mateusz-mto-gierblinski/">Mateusz Gierblinski</a> with <a href="https://curios-it.eu/">Curios</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-102867 Out-of-bounds Read Improper Input Validation 11762 11763 11952 11953 12420 12421 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes namnp with <a href="https://x.com/vcslab">Viettel Cyber Security</a> vietnq 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET and Visual Studio Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by convincing a user or service to process a specially crafted Portable PDB file. Successful exploitation could allow the attacker to execute code with the privileges of the affected process.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain the privileges of the user account or service account running the affected process.</p> .NET and Visual Studio Microsoft Yes CVE-2026-102869 Access of Resource Using Incompatible Type ('Type Confusion') 16767 21956 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 Elevation of Privilege 16767 Elevation of Privilege 21956 Elevation of Privilege 11723-22028 Elevation of Privilege 11723-10816 Elevation of Privilege 11723-11571 Elevation of Privilege 11677-22029 Elevation of Privilege 11676-22029 Elevation of Privilege 11676-21983 Elevation of Privilege 11676-21984 Elevation of Privilege 11676-11571 Elevation of Privilege 11676-11923 Elevation of Privilege 11863-10378 Elevation of Privilege 11863-10483 Elevation of Privilege 11650-22028 Elevation of Privilege 11650-10378 Elevation of Privilege 11650-10483 Elevation of Privilege 11650-10816 Elevation of Privilege 12079-21983 Elevation of Privilege 12079-21984 Elevation of Privilege 12079-21985 Elevation of Privilege 12079-21986 Elevation of Privilege 12079-12436 Elevation of Privilege 12078-21987 Elevation of Privilege 12079-21988 Elevation of Privilege 12079-11923 Elevation of Privilege 12079-21989 Important 16767 Important 21956 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21985 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21986 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21988 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21989 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 Henrique Pereira with Microsoft 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> ASP.NET Core Remote Code Execution Vulnerability <p>Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could supply specially crafted data to an application being debugged. If a developer evaluates an affected object during a Blazor WebAssembly debugging session, successful exploitation could allow the attacker to execute code in the developer's context. User interaction is required.</p> ASP.NET Core Microsoft Yes CVE-2026-102870 Improper Control of Generation of Code ('Code Injection') 21956 16767 21963-20837 21963-20839 21963-20838 21963-21783 21963-21785 21963-21784 21963 22238 22226 22227 22228 22229 22230 22231 22232 22233 22234 Remote Code Execution 21956 Remote Code Execution 16767 Remote Code Execution 21963-20837 Remote Code Execution 21963-20839 Remote Code Execution 21963-20838 Remote Code Execution 21963-21783 Remote Code Execution 21963-21785 Remote Code Execution 21963-21784 Remote Code Execution 21963 Remote Code Execution 22238 Remote Code Execution 22226 Remote Code Execution 22227 Remote Code Execution 22228 Remote Code Execution 22229 Remote Code Execution 22230 Remote Code Execution 22231 Remote Code Execution 22232 Remote Code Execution 22233 Remote Code Execution 22234 Important 21956 Important 16767 Important 21963-20837 Important 21963-20839 Important 21963-20838 Important 21963-21783 Important 21963-21785 Important 21963-21784 Important 21963 Important 22238 Important 22226 Important 22227 Important 22228 Important 22229 Important 22230 Important 22231 Important 22232 Important 22233 Important 22234 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-20837 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-20839 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-20838 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-21783 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-21785 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-21784 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22233 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.43 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.Components.WebAssembly.Server 21963-20837 21963-20839 21963-20838 Security Update 10.0.13 https://github.com/dotnet/announcements/issues/445 21963-20837 21963-20839 21963-20838 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.Components.WebAssembly.Server 21963-21783 21963-21785 21963-21784 Security Update 11.0.0-rc.2.26478.115 https://github.com/dotnet/announcements/issues/445 21963-21783 21963-21785 21963-21784 Release Notes 5133966 https://www.nuget.org/packages/Microsoft.AspNetCore.Components.WebAssembly.Server/10.0.14 21963 Yes Security Update 10.0.14 https://support.microsoft.com/help/5133966 21963 5133966 5133966 https://www.nuget.org/packages/Microsoft.AspNetCore.Components.WebAssembly.DevServer/10.0.14 22238 Yes Security Update 10.0.14 https://support.microsoft.com/help/5133966 22238 5133966 5133966 https://dotnet.microsoft.com/download/dotnet/10.0 22226 22227 22228 Yes Security Update 10.0.403 https://support.microsoft.com/help/5133966 22226 22227 22228 5133966 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 22229 22230 22231 Yes Security Update 11.0.100-rc.3 https://github.com/dotnet/core/blob/main/release-notes/11.0/preview/rc3/11.0.0-rc.3.md 22229 22230 22231 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2019/release-history 22232 Yes Security Update 16.11.61 https://learn.microsoft.com/en-us/visualstudio/releases/2019/release-notes 22232 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 22233 Yes Security Update 18.11.2 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 22233 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 22234 Yes Security Update 18.12 Insiders 3 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes-insiders 22234 Release Notes alittleston3 <a href="https://lucas-futures.com/">Longwei Wang</a> with <a href="https://lucas-futures.com/">Lucas Futures</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-25T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> Windows Partition Management Driver Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Partition Management Driver Microsoft Yes CVE-2026-103553 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; wgg 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-103554 Use After Free 12389 12390 20437 20438 21945 21946 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 12242 12243 20854 20853 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Virtual Hard Disk (VHD) Miniport Driver Microsoft Yes CVE-2026-103555 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://www.linkedin.com/in/divyasundar16">Divya Sundar</a> with Microsoft- MSRC V&amp;M <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability <p>Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-103558 Deadlock 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 Denial of Service 12390 Denial of Service 20437 Denial of Service 20438 Denial of Service 21945 Denial of Service 21946 Denial of Service 12436 Denial of Service 12437 Denial of Service 20854 Denial of Service 20853 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12099 Denial of Service 12098 Denial of Service 12097 Denial of Service 11923 Denial of Service 11924 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 20437 20438 21945 21946 12389 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Tampering Vulnerability <p>Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.</p> Role: DNS Server Microsoft Yes CVE-2026-103560 Missing Authorization 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 Tampering 10378 Tampering 10379 Tampering 10483 Tampering 10543 Tampering 10816 Tampering 10855 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 12436 Tampering 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10816 Important 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 <a href="https://www.linkedin.com/in/sneha-ravichandran/">Sneha Ravichandran</a> with Microsoft <a href="https://www.linkedin.com/in/sneha-ravichandran/">Sneha Ravichandran</a> with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-103565 Use After Free 11571 11572 11568 11569 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11571 Important 11572 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Information Disclosure Vulnerability <p>Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-103567 Buffer Over-read 11571 11572 11568 11569 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 20854 Information Disclosure 20853 Important 11571 Important 11572 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Credential Providers Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>In this case, a successful attack could be performed from a low privilege <a href="https://docs.microsoft.com/windows/win32/secauthz/appcontainer-isolation">AppContainer</a>. The attacker could elevate their privileges and execute code or access resources at a higher integrity level than that of the AppContainer execution environment.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained (&quot;sandboxed&quot;) execution environment to a Medium Integrity Level.</p> <p>Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> Windows Credential Providers Microsoft Yes CVE-2026-103568 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows IKE Extension Information Disclosure Vulnerability <p>Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is remote heap memory.</p> Windows IKE Extension Microsoft Yes CVE-2026-103569 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability <p>Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>The AV:N rating indicates the vulnerability is exploitable over the network, meaning an attacker can deliver a malicious prompt remotely without prior access, while UI:R means a user must interact with Copilot for exploitation to occur. Due to prompt injection, the system is coerced into executing attacker-controlled instructions, which can escalate into remote code execution (RCE) when the compromised prompt causes backend components or integrated tools to run unintended commands.</p> Visual Studio Tools for Applications and SQL Server Management Studio Microsoft Yes CVE-2026-103572 Improper Control of Generation of Code ('Code Injection') 21956 16767 Remote Code Execution 21956 Remote Code Execution 16767 Important 21956 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes <a href="https://github.com/zeze-zeze">Zeze</a> with <a href="https://www.txone.com/">TXOne</a> <a href="https://twitter.com/wunderwuzzi23">Johann Rehberger</a> with https://embracethered.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-16T07:00:00 <p>Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Remote Desktop Client Microsoft Yes CVE-2026-103575 Use After Free 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 20437 20438 21945 21946 12389 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Spoofing Vulnerability <p>Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to loss of confidentiality (C:H)? What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability allows an attacker to impersonate another user and access information based on the victim user's permission levels.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-103576 URL Redirection to Untrusted Site ('Open Redirect') 10816 10855 11571 11572 11923 11924 12436 12437 10852 10853 11568 11569 Spoofing 10816 Spoofing 10855 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 12436 Spoofing 12437 Spoofing 10852 Spoofing 10853 Spoofing 11568 Spoofing 11569 Important 10816 Important 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Important 10852 Important 10853 Important 11568 Important 11569 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 10852 10853 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft QUIC Security Feature Bypass Vulnerability <p>Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N), privilege required is none (PR:N), and user interaction is none (UI:N). What is the target used in the context of the security feature bypass?</strong></p> <p>An attacker without existing privileges can remotely bypass authentication and obtain a successful login without additional user interaction.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Microsoft QUIC Microsoft Yes CVE-2026-103577 Insecure Default Variable Initialization 21945 21946 11924 12243 12390 20437 20438 12436 11923 12242 12389 12437 20854 20853 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 11924 Security Feature Bypass 12243 Security Feature Bypass 12390 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12436 Security Feature Bypass 11923 Security Feature Bypass 12242 Security Feature Bypass 12389 Security Feature Bypass 12437 Security Feature Bypass 20854 Security Feature Bypass 20853 Important 21945 Important 21946 Important 11924 Important 12243 Important 12390 Important 20437 Important 20438 Important 12436 Important 11923 Important 12242 Important 12389 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 12390 20437 20438 12389 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 5126655 https://support.microsoft.com/help/5126655 11924 11923 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://novice-22.com/">novice-22</a> PuH4ck3rX <a href="https://x.com/shibi_kishore">Shibi Kishore N</a> Anonymous <a href="https://x.com/soaj1664ashar">Dr.-Ing Ashar Javed</a> Liang Zhu Lucas Futures <a href="https://instagram.com/aeqkin">Samuel</a> with <a href="https://github.com/samuelgirmametaferia">Independent</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-103578 Untrusted Pointer Dereference 20854 20853 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Chromium CVE-2026-103621: Integer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-103621 21955 21955 21955 Release Notes 21955 No Security Update 154.0.4258.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-103622: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-103622 21955 21955 21955 Release Notes 21955 No Security Update 154.0.4258.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-103623: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-103623 21955 21955 21955 Release Notes 21955 No Security Update 154.0.4258.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-103624: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-103624 21955 21955 Important 21955 Release Notes 21955 No Security Update 154.0.4258.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-103625: Type confusion <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-103625 21955 21955 21955 Release Notes 21955 No Security Update 154.0.4258.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-103626: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-103626 21955 21955 21955 Release Notes 21955 No Security Update 154.0.4258.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-103627: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-103627 21955 21955 21955 Release Notes 21955 No Security Update 154.0.4258.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-103628: Out of bounds write <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-103628 21955 21955 21955 Release Notes 21955 No Security Update 154.0.4258.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-103629: Integer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-103629 21955 21955 21955 Release Notes 21955 No Security Update 154.0.4258.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-103630: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-103630 21955 21955 21955 Release Notes 21955 No Security Update 154.0.4258.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-103631: Buffer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-103631 21955 21955 21955 Release Notes 21955 No Security Update 154.0.4258.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> HID Class Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> HID class driver Microsoft Yes CVE-2026-105003 Heap-based Buffer Overflow 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Overlay Filter Microsoft Yes CVE-2026-105004 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Schannel Remote Code Execution Vulnerability <p>Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> Windows Schannel Microsoft Yes CVE-2026-105005 Out-of-bounds Write 20854 20853 Remote Code Execution 20854 Remote Code Execution 20853 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> HID Class Driver Elevation of Privilege Vulnerability <p>Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> HID class driver Microsoft Yes CVE-2026-105006 Use After Free 12437 20854 20853 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Important 12437 Important 20854 Important 20853 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NDIS Elevation of Privilege Vulnerability <p>An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it.</p> <p>To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level. An attacker who successfully exploited this vulnerability could run processes in an elevated context. However, an attacker must first gain access to the local system with the ability to execute a malicious application in order to exploit this vulnerability.</p> <p>The security update addresses the vulnerability by changing how ndis.sys validates buffer length.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Windows NDIS Microsoft Yes CVE-2026-105007 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 OOOooooooOOO GraVity0 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Schannel Spoofing Vulnerability <p>No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to loss of confidentiality (C:H)? What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability allows an attacker to impersonate another user and access information based on the victim user's permission levels.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> Windows Schannel Microsoft Yes CVE-2026-105008 Unprotected Alternate Channel 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11929 Spoofing 11930 Spoofing 11931 Spoofing 12099 Spoofing 12098 Spoofing 12097 Spoofing 11923 Spoofing 11924 Spoofing 12242 Spoofing 12243 Spoofing 12389 Spoofing 12390 Spoofing 20437 Spoofing 20438 Spoofing 21945 Spoofing 21946 Spoofing 12436 Spoofing 12437 Spoofing 20854 Spoofing 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yellowday60 <a href="https://x.com/ky0tofu">Ky0toFu</a> 1.1 2026-10-16T07:00:00 <p>CWE added. Informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.2 2026-10-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Server Update Service Elevation of Privilege Vulnerability <p>Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition and also to take additional actions prior to exploitation to prepare the target environment.</p> Windows Server Update Service Microsoft Yes CVE-2026-105009 Incorrect Default Permissions 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12436 Elevation of Privilege 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10816 Important 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-105010 Use After Free 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/divyasundar16">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-105013 Deserialization of Untrusted Data 11961 Remote Code Execution 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Azure Pipelines Remote Code Execution Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Pipelines Microsoft No CVE-2026-105014 Improper Neutralization of Special Elements used in a Command ('Command Injection') 22136 Remote Code Execution 22136 Critical 22136 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.1 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C 22136 Jianyang Song 1.0 2026-10-22T07:00:00 <p>Information published.</p> Microsoft QUIC Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Microsoft QUIC Microsoft Yes CVE-2026-105016 Heap-based Buffer Overflow 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 21956 16767 12414 12434 20837 21783 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Remote Code Execution 21956 Remote Code Execution 16767 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 20837 Remote Code Execution 21783 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Critical 21956 Critical 16767 Critical 12414 Critical 12434 Critical 20837 Critical 21783 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Yes Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Yes Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 Release Notes https://dotnet.microsoft.com/download/dotnet/10.0 20837 Yes Security Update 10.0.14 https://github.com/dotnet/announcements/issues/446 20837 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Yes Security Update 11.0.0-rc.2.26504.105 https://github.com/dotnet/announcements/issues/446 21783 Release Notes pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-105591 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-105592 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-105593 Heap-based Buffer Overflow 12421 12420 11763 11762 11952 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11952 Remote Code Execution 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 11952 Important 11953 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Access Remote Code Execution Vulnerability <p>Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-105595 Out-of-bounds Read 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-105596 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-105597 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes zsh 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-105598 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office PowerPoint Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-105599 Heap-based Buffer Overflow 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> Microsoft Office SharePoint Spoofing Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H). What does that mean for this vulnerability?</strong></p> <p>This vulnerability discloses a user's NTLMv2 hash to the attacker who could use this to authenticate as the user.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-105713 Server-Side Request Forgery (SSRF) 11961 Spoofing 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 polidinh 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-105714 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> Microsoft Office Word Microsoft Yes CVE-2026-105715 Integer Overflow or Wraparound Use After Free 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> Microsoft Office Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-105716 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-105717 Heap-based Buffer Overflow Improper Input Validation 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-105718 Out-of-bounds Read Improper Input Validation 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Critical 21368 Critical 11951 Critical 12440 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> Microsoft SharePoint Server Information Disclosure Vulnerability <p>Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Successful exploitation could allow an authenticated user with permissions to create and customize pages to read sensitive server configuration information, including application settings and connection strings.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-105719 Improper Input Validation 11961 Information Disclosure 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 <a href="https://hsw109.github.io/">hsw109</a> with Viettel Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>Successful exploitation could allow a user with read-only access to the SharePoint Holds list to schedule hold-processing operations normally restricted to users who manage holds, changing the compliance state of documents.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-105720 Incorrect Authorization 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 <a href="https://www.linkedin.com/in/supawee-foitong/">Supawee Foitong</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-105722 Use After Free 11568 11569 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 11571 11572 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 11571 Elevation of Privilege 11572 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Important 11571 Important 11572 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Distributed File System (DFS) Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.</p> Windows Distributed File System (DFS) Microsoft Yes CVE-2026-105723 Untrusted Pointer Dereference 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12389 12390 20437 20438 21945 21946 12436 12437 12243 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 12243 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 12243 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/si-yeon-wi-b869533b4">wisi</a> <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; np0vo</a> with https://diffract-ai.com/ 1.1 2026-10-14T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Security App Elevation of Privilege Vulnerability <p>Use after free in Windows Security App allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>Is more information available about Windows Security App?</strong></p> <p>Yes, please see <a href="https://support.microsoft.com/en-us/windows/stay-protected-with-the-windows-security-app-2ae0363d-0ada-c064-8b56-6a39afb6a963">Stay Protected With the Windows Security App</a> for more information.</p> <p><strong>How do I know if I'm protected from this vulnerability</strong></p> <p>From the <strong>Start</strong> menu, type Windows Security and hit <strong>Enter</strong>. The Windows Security App will be displayed. Click on the <strong>Settings</strong> control and then click the <strong>About</strong> link. The current version will be displayed. See that your version is greater than or equal to 1000.27840.0.0.</p> Windows Security App Microsoft Yes CVE-2026-105725 Use After Free 16766 Elevation of Privilege 16766 Important 16766 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16766 Release Notes 16766 Security Update 1000.27840.1000.0 https://support.microsoft.com/en-us/windows/stay-protected-with-the-windows-security-app-2ae0363d-0ada-c064-8b56-6a39afb6a963 16766 Release Notes Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Defender Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.</p> Microsoft Defender Microsoft Yes CVE-2026-105726 Out-of-bounds Read 12013 Information Disclosure 12013 Important 12013 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12013 Release Notes 12013 Maybe Security Update 4.18.26060.3008 https://learn.microsoft.com/en-us/defender-endpoint/microsoft-defender-endpoint-releases#windows-antivirus--june-2026--platform-418260603008--engine-11260603008 12013 Release Notes k0shl using GLM from z.ai (https://z.ai) 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-11-02T08:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain the privileges of the user account or service account running the affected process.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low privileges could send specially crafted requests to write files to locations accessible to the affected web application. Successful exploitation could allow the attacker to gain the privileges of the application-pool identity or compromise other users’ sessions.</p> Dynamics Business Central Microsoft Yes CVE-2026-105727 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 11746-10378 Elevation of Privilege 11746-10378 Important 11746-10378 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11746-10378 Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=108852 5022710 11746-10378 Yes Security Update 11.0.50736.0 https://support.microsoft.com/en-gb/servicing/dynamics/nav/update/2022/12/cumulative-update-60-for-microsoft-dynamics-nav-2018-build-49618 11746-10378 Release Notes Nolan Hayes 1.0 2026-10-13T07:00:00 <p>Information published.</p> Dynamics Business Central Information Disclosure Vulnerability <p>Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.</p> Dynamics Business Central Microsoft Yes CVE-2026-105728 Missing Authentication for Critical Function 11746-10378 Information Disclosure 11746-10378 Important 11746-10378 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11746-10378 Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=108852 5022710 11746-10378 Yes Security Update 11.0.50736.0 https://support.microsoft.com/en-gb/servicing/dynamics/nav/update/2022/12/cumulative-update-60-for-microsoft-dynamics-nav-2018-build-49618 11746-10378 Release Notes Ilyass El Hadi with Armadin https://armadin.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> SysInternals Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> SysInternals Microsoft Yes CVE-2026-105729 Untrusted Pointer Dereference 12190 Elevation of Privilege 12190 Important 12190 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12190 Release Notes https://learn.microsoft.com/sysinternals/downloads/procmon 12190 Maybe Security Update v4.04 https://learn.microsoft.com/sysinternals/downloads/procmon 12190 Release Notes <a href="https://github.com/zeze-zeze">Zeze</a> with <a href="https://www.txone.com/">TXOne</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Graphics Component Information Disclosure Vulnerability <p>Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory and kernel memory - unintentional read access to memory contents in kernel space from a user mode process.</p> Microsoft Graphics Component Microsoft Yes CVE-2026-105731 Use of Uninitialized Resource 12155 Information Disclosure 12155 Important 12155 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12155 Release Notes https://support.microsoft.com/en-us/microsoft-365 12155 Security Update 16.0.20430.20000 https://support.microsoft.com/en-us/microsoft-365 12155 Release Notes Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> SysInternals Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain the privileges of the user account or service account running the affected process.</p> SysInternals Microsoft Yes CVE-2026-105732 Stack-based Buffer Overflow 12205 Elevation of Privilege 12205 Important 12205 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12205 Release Notes https://download.sysinternals.com/files/PipeList.zip 12205 Maybe Security Update 1.03 https://learn.microsoft.com/en-us/sysinternals/downloads/pipelist 12205 Release Notes Syed Zainudeen 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Remote Code Execution Vulnerability <p>Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>To exploit this vulnerability, an attacker could run a specially crafted application on a Hyper-V guest that could cause the Hyper-V host operating system to execute arbitrary code.</p> <p><strong>According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An attacker on a nested guest VM who successfully exploited the vulnerability could escape their VM and gain admin privilege on the guest that is serving as the host.</p> <p>For diagrams and more detailed information about nested VMs please see <a href="https://learn.microsoft.com/en-us/virtualization/hyper-v-on-windows/user-guide/nested-virtualization">Run Hyper-V in a Virtual Machine with Nested Virtualization</a>.</p> Windows Hyper-V Microsoft Yes CVE-2026-105733 Incorrect Initialization of Resource 11930 12098 11931 12097 11923 11924 12243 12390 20438 21946 12436 12437 20853 12242 12389 20437 21945 20854 12099 11929 Remote Code Execution 11930 Remote Code Execution 12098 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12243 Remote Code Execution 12390 Remote Code Execution 20438 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20853 Remote Code Execution 12242 Remote Code Execution 12389 Remote Code Execution 20437 Remote Code Execution 21945 Remote Code Execution 20854 Remote Code Execution 12099 Remote Code Execution 11929 Critical 11930 Critical 12098 Critical 11931 Critical 12097 Critical 11923 Critical 11924 Critical 12243 Critical 12390 Critical 20438 Critical 21946 Critical 12436 Critical 12437 Critical 20853 Critical 12242 Critical 12389 Critical 20437 Critical 21945 Critical 20854 Critical 12099 Critical 11929 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11930 11931 11929 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11930 11931 11929 5126657 5126657 https://support.microsoft.com/help/5126657 11930 12098 11931 12097 12099 11929 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12098 12097 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12098 12097 12099 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 20438 21946 12389 20437 21945 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 namnp with <a href="https://x.com/vcslab">Viettel Cyber Security</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Chromium CVE-2026-106179: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106179 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106180: Observable discrepancy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106180 Observable Discrepancy 21955 21955 Moderate 21955 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106181: Incorrect reference resolution <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106181 Use of Incorrectly-Resolved Name or Reference 21955 21955 Moderate 21955 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106182: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106182 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Moderate 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106183: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106183 Missing Authorization 21955 21955 Moderate 21955 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106184: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106184 Use of Uninitialized Resource 21955 21955 Important 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:03:57 <p>Information published.</p> Chromium CVE-2026-106185: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106185 Improper Input Validation 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106186: Uncontrolled search path element <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106186 Uncontrolled Search Path Element 21955 21955 Low 21955 8.6 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106187: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106187 Missing Authorization 21955 21955 Low 21955 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106188: Confused deputy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106188 Unintended Proxy or Intermediary ('Confused Deputy') 21955 21955 Moderate 21955 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106189: Code injection <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106189 Improper Control of Generation of Code ('Code Injection') 21955 21955 Moderate 21955 7.3 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106190: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106190 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106191: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106191 Missing Authorization 21955 21955 Low 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106192: Information leak in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106192 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:50:46 <p>Information published.</p> Chromium CVE-2026-106193: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106193 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106194: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106194 Missing Authorization 21955 21955 Moderate 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106195: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106195 Incorrect Authorization 21955 21955 Low 21955 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106196: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106196 Missing Authorization 21955 21955 Moderate 21955 7.6 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106197: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106197 Use After Free 21955 21955 Critical 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106198: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106198 Missing Authorization 21955 21955 Moderate 21955 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106199: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106199 Incorrect Authorization 21955 21955 Low 21955 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106200: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106200 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:01 <p>Information published.</p> Chromium CVE-2026-106201: Race condition <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106201 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106202: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106202 Use of Uninitialized Resource 21955 21955 Important 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106203: Incomplete cleanup <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106203 Incomplete Cleanup 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106204: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106204 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106205: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106205 Missing Authorization 21955 21955 Moderate 21955 8.1 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106206: Improper input validation in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106206 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:50:48 <p>Information published.</p> Chromium CVE-2026-106207: Race condition <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106207 Time-of-check Time-of-use (TOCTOU) Race Condition 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106208: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106208 Missing Authorization 21955 21955 Moderate 21955 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106209: UI misrepresentation in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106209 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:50:50 <p>Information published.</p> Chromium CVE-2026-106210: Observable discrepancy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106210 Observable Discrepancy 21955 21955 Moderate 21955 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106211: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106211 Use After Free 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106212: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106212 Incorrect Authorization 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106213: Race condition <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106213 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 21955 21955 Moderate 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106214: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106214 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Important 21955 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106215: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106215 Use of Uninitialized Resource 21955 21955 Important 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106216: Cross-site request forgery <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106216 Cross-Site Request Forgery (CSRF) 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106217: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106217 Missing Authorization 21955 21955 Moderate 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106220: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106220 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106221: Confused deputy in WebAPKs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106221 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:50:52 <p>Information published.</p> Chromium CVE-2026-106222: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106222 Incorrect Authorization 21955 21955 Moderate 21955 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106223: Uninitialized resource in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106223 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:50:54 <p>Information published.</p> Chromium CVE-2026-106224: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106224 Missing Authorization 21955 21955 Moderate 21955 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106225: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106225 Missing Authorization 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106226: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106226 Improper Input Validation 21955 21955 Moderate 21955 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106227: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106227 Use After Free 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106228: Confused deputy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106228 Unintended Proxy or Intermediary ('Confused Deputy') 21955 21955 Moderate 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106229: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106229 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Moderate 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106230: Incorrect reference resolution <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106230 Use of Incorrectly-Resolved Name or Reference 21955 21955 Moderate 21955 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106231: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106231 Use of Uninitialized Resource 21955 21955 Important 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106232: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106232 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Moderate 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106233: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106233 Use After Free 21955 21955 Important 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106234: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106234 Use After Free 21955 21955 Low 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106235: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106235 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:05 <p>Information published.</p> Chromium CVE-2026-106236: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106236 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106237: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106237 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Low 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106238: Race condition <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106238 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 21955 21955 Moderate 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106239: Integer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106239 Integer Overflow or Wraparound 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106240: Type confusion <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106240 Access of Resource Using Incompatible Type ('Type Confusion') 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106241: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106241 Incorrect Authorization 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106242: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106242 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106243: Incomplete cleanup <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106243 Incomplete Cleanup 21955 21955 Important 21955 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106244: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106244 Incorrect Authorization 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106245: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106245 Use of Uninitialized Resource 21955 21955 Important 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106246: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106246 Incorrect Authorization 21955 21955 Moderate 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106247: Buffer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106247 Heap-based Buffer Overflow 21955 21955 Low 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106248: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106248 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106249: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106249 Incorrect Authorization 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106250: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106250 Missing Authorization 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106251: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106251 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106252: Incorrect comparison <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106252 Incorrect Comparison 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106253: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106253 Incorrect Authorization 21955 21955 Moderate 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106254: Information leak in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106254 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:50:56 <p>Information published.</p> Chromium CVE-2026-106255: Race condition <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106255 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106256: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106256 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106257: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106257 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106258: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106258 Use of Uninitialized Resource 21955 21955 Important 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106259: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106259 Incorrect Authorization 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106260: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106260 Incorrect Authorization 21955 21955 Low 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106261: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106261 Use of Uninitialized Resource 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106262: Incomplete cleanup <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106262 Incomplete Cleanup 21955 21955 Moderate 21955 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106263: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106263 Improper Input Validation 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106264: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106264 Missing Authorization 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106265: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106265 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Moderate 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106266: Confused deputy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106266 Unintended Proxy or Intermediary ('Confused Deputy') 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106267: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106267 Missing Authorization 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106268: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106268 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106269: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106269 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 1.1 2026-10-26T22:56:50 <p>Information published.</p> Chromium CVE-2026-106270: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106270 Incorrect Authorization 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106271: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106271 Missing Authorization 21955 21955 Moderate 21955 8.1 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106272: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106272 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106273: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106273 Use of Uninitialized Resource 21955 21955 Important 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106274: Incorrect reference resolution <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106274 Use of Incorrectly-Resolved Name or Reference 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106275: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106275 Use of Uninitialized Resource 21955 21955 Low 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106276: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106276 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106277: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106277 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Moderate 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106278: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106278 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106279: Incorrect reference resolution <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106279 Use of Incorrectly-Resolved Name or Reference 21955 21955 Moderate 21955 7.4 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106280: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106280 Incorrect Authorization 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106281: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106281 Use After Free 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106282: UI misrepresentation in WebOTP <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106282 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T22:56:57 <p>Information published.</p> Chromium CVE-2026-106283: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106283 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106284: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106284 Out-of-bounds Read 21955 21955 Moderate 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106285: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106285 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106286: Confused deputy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106286 Unintended Proxy or Intermediary ('Confused Deputy') 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106287: Information loss <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106287 Information Loss or Omission 21955 21955 Low 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106288: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106288 Missing Authorization 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106289: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106289 Missing Authorization 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106290: Uninitialized resource in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106290 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:50:57 <p>Information published.</p> Chromium CVE-2026-106291: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106291 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106292: Buffer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106292 Heap-based Buffer Overflow 21955 21955 Moderate 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106293: Type confusion <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106293 Access of Resource Using Incompatible Type ('Type Confusion') 21955 21955 Important 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106294: Incomplete cleanup <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106294 Incomplete Cleanup 21955 21955 Low 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106295: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106295 Incorrect Authorization 21955 21955 Moderate 21955 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106296: Improper privilege management in UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106296 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:50:59 <p>Information published.</p> Chromium CVE-2026-106297: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106297 Incorrect Authorization 21955 21955 Low 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106298: Use after free in Chrome Tabs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106298 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:01 <p>Information published.</p> Chromium CVE-2026-106299: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106299 Improper Input Validation 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106300: Race condition <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106300 Time-of-check Time-of-use (TOCTOU) Race Condition 21955 21955 Moderate 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106301: Confused deputy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106301 Unintended Proxy or Intermediary ('Confused Deputy') 21955 21955 Moderate 21955 8.1 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106302: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106302 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Moderate 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106303: Observable discrepancy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106303 Observable Discrepancy 21955 21955 Moderate 21955 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106304: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106304 Out-of-bounds Read 21955 21955 Moderate 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106305: UI misrepresentation in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106305 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:03 <p>Information published.</p> Chromium CVE-2026-106306: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106306 Incorrect Authorization 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106307: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106307 Incorrect Authorization 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106308: Incorrect reference resolution <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106308 Use of Incorrectly-Resolved Name or Reference 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106309: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106309 Incorrect Authorization 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106310: Use of released resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106310 Operation on a Resource after Expiration or Release 21955 21955 Low 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106311: Clickjacking <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106311 Improper Restriction of Rendered UI Layers or Frames 21955 21955 Moderate 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106312: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106312 Missing Authorization 21955 21955 Low 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106313: Incorrect authorization in Browser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106313 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:05 <p>Information published.</p> Chromium CVE-2026-106314: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106314 Incorrect Authorization 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106315: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106315 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106316: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106316 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106317: UI misrepresentation in FullScreen <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106317 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:06 <p>Information published.</p> Chromium CVE-2026-106318: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106318 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106320: Use of released resource in UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106320 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:08 <p>Information published.</p> Chromium CVE-2026-106321: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106321 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Moderate 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106322: Open redirect <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106322 URL Redirection to Untrusted Site ('Open Redirect') 21955 21955 Moderate 21955 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106324: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106324 Incorrect Authorization 21955 21955 Moderate 21955 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106325: Incorrect reference resolution <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106325 Use of Incorrectly-Resolved Name or Reference 21955 21955 Low 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106326: Confused deputy in UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106326 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:11 <p>Information published.</p> Chromium CVE-2026-106327: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106327 Incorrect Authorization 21955 21955 Important 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106328: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106328 Incorrect Authorization 21955 21955 Moderate 21955 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106329: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106329 Incorrect Authorization 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106330: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106330 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Moderate 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106331: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106331 Improper Input Validation 21955 21955 Low 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106332: Integer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106332 Integer Overflow or Wraparound 21955 21955 Important 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106333: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106333 Incorrect Authorization 21955 21955 Moderate 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106334: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106334 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106335: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106335 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106336: Observable discrepancy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106336 Observable Discrepancy 21955 21955 Moderate 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106337: UI misrepresentation in UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106337 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:13 <p>Information published.</p> Chromium CVE-2026-106338: UI misrepresentation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106338 User Interface (UI) Misrepresentation of Critical Information 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106339: Use of released resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106339 Operation on a Resource after Expiration or Release 21955 21955 Low 21955 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106340: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106340 Missing Authorization 21955 21955 Low 21955 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106341: Type confusion <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106341 Access of Resource Using Incompatible Type ('Type Confusion') 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106342: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106342 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106343: Improper state validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106343 Improper Check for Unusual or Exceptional Conditions 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106344: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106344 Missing Authorization 21955 21955 Low 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106345: Use of released resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106345 Operation on a Resource after Expiration or Release 21955 21955 Low 21955 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106346: Improper state validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106346 Improper Check for Unusual or Exceptional Conditions 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106347: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106347 Use After Free 21955 21955 Critical 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:08 <p>Information published.</p> Chromium CVE-2026-106348: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106348 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106349: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106349 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106350: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106350 Incorrect Authorization 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106351: Observable discrepancy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106351 Observable Discrepancy 21955 21955 Moderate 21955 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106352: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106352 Incorrect Authorization 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106353: Improper input validation in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106353 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:15 <p>Information published.</p> Chromium CVE-2026-106354: Improper resource exposure <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106354 Exposure of Resource to Wrong Sphere 21955 21955 Moderate 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106355: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106355 Missing Authorization 21955 21955 Low 21955 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106356: Clickjacking <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106356 Improper Restriction of Rendered UI Layers or Frames 21955 21955 Moderate 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106357: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106357 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106358: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106358 Use After Free 21955 21955 Critical 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:12 <p>Information published.</p> Chromium CVE-2026-106359: Confused deputy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106359 Unintended Proxy or Intermediary ('Confused Deputy') 21955 21955 Low 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106360: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106360 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Moderate 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106361: Incorrect provision of specified functionality in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106361 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:16 <p>Information published.</p> Chromium CVE-2026-106362: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106362 Missing Authorization 21955 21955 Low 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106363: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106363 Missing Authorization 21955 21955 Moderate 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106364: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106364 Incorrect Authorization 21955 21955 Important 21955 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106365: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106365 Missing Authorization 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106366: Incomplete cleanup in CustomTabs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106366 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:18 <p>Information published.</p> Chromium CVE-2026-106367: Missing authorization in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106367 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:20 <p>Information published.</p> Chromium CVE-2026-106368: UI misrepresentation in UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106368 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:21 <p>Information published.</p> Chromium CVE-2026-106369: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106369 Missing Authorization 21955 21955 Important 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106370: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106370 Use of Uninitialized Resource 21955 21955 Moderate 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106371: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106371 Incorrect Authorization 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106372: Incorrect authorization in UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106372 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T22:57:03 <p>Information published.</p> Chromium CVE-2026-106373: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106373 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106374: Type confusion <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106374 Access of Resource Using Incompatible Type ('Type Confusion') 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106375: Incomplete cleanup <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106375 Incomplete Cleanup 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106376: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106376 Use of Uninitialized Resource 21955 21955 Important 21955 4.7 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106377: Race condition <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106377 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 21955 21955 Important 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106378: Privilege elevation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106378 Execution with Unnecessary Privileges 21955 21955 Important 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 1.1 2026-10-26T22:57:05 <p>Information published.</p> Chromium CVE-2026-106379: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106379 Use of Uninitialized Resource 21955 21955 Important 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106380: UI misrepresentation in UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106380 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:23 <p>Information published.</p> Chromium CVE-2026-106381: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106381 Incorrect Authorization 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106382: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106382 Use After Free 21955 21955 Critical 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106383: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106383 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:16 <p>Information published.</p> Chromium CVE-2026-106384: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106384 Missing Authorization 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106385: Race condition <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106385 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 21955 21955 Low 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106386: Uninitialized resource <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106386 Use of Uninitialized Resource 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106387: Missing authorization in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106387 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:25 <p>Information published.</p> Chromium CVE-2026-106388: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106388 Missing Authorization 21955 21955 Moderate 21955 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106389: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106389 Incorrect Authorization 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106390: Incorrect provision of specified functionality <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106390 Incorrect Provision of Specified Functionality 21955 21955 Low 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106391: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106391 Incorrect Authorization 21955 21955 Moderate 21955 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106392: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106392 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Moderate 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106393: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106393 Use After Free 21955 21955 Important 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106394: Incomplete cleanup <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106394 Incomplete Cleanup 21955 21955 Low 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106395: Uninitialized resource in Dawn <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106395 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:27 <p>Information published.</p> Chromium CVE-2026-106396: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106396 Improper Input Validation 21955 21955 Important 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106397: Incorrect authorization in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106397 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:28 <p>Information published.</p> Chromium CVE-2026-106398: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106398 Incorrect Authorization 21955 21955 Moderate 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106399: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106399 Out-of-bounds Read 21955 21955 Low 21955 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106400: Clickjacking in Messages <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106400 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:30 <p>Information published.</p> Chromium CVE-2026-106401: Out of bounds write <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106401 Out-of-bounds Write 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106402: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106402 Incorrect Authorization 21955 21955 Moderate 21955 4.8 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106403: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106403 Incorrect Authorization 21955 21955 Moderate 21955 8.1 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106404: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106404 Incorrect Authorization 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106405: Race condition in CustomTabs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106405 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:32 <p>Information published.</p> Chromium CVE-2026-106406: Missing authorization in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106406 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:33 <p>Information published.</p> Chromium CVE-2026-106407: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106407 Incorrect Authorization 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106408: Protection mechanism failure in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106408 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:35 <p>Information published.</p> Chromium CVE-2026-106409: Incorrect reference resolution <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106409 Use of Incorrectly-Resolved Name or Reference 21955 21955 Moderate 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106410: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106410 Missing Authorization 21955 21955 Moderate 21955 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106411: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106411 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106412: Race condition <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106412 Time-of-check Time-of-use (TOCTOU) Race Condition 21955 21955 Important 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106413: Race condition <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106413 Time-of-check Time-of-use (TOCTOU) Race Condition 21955 21955 Low 21955 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106414: Improper input validation in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106414 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:37 <p>Information published.</p> Chromium CVE-2026-106415: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106415 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Moderate 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106416: Code injection <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106416 Improper Control of Generation of Code ('Code Injection') 21955 21955 Moderate 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106417: Integer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106417 Integer Overflow or Wraparound 21955 21955 Low 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106418: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106418 Missing Authorization 21955 21955 Low 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106419: Use after free in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106419 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:39 <p>Information published.</p> Chromium CVE-2026-106420: Incorrect calculation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106420 Incorrect Calculation 21955 21955 Moderate 21955 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106421: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106421 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106422: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106422 Incorrect Authorization 21955 21955 Low 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106423: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106423 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106424: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106424 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Moderate 21955 4.0 4.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106425: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106425 Missing Authorization 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106426: Race condition <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106426 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 21955 21955 Important 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.45 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-106427: Confused deputy in Mobile <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-106427 21933 21933 21933 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 155.0.4283.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:51:41 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-108127 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-108128 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-108129 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Virtualization-Based Security (VBS) Enclave Microsoft Yes CVE-2026-108130 Heap-based Buffer Overflow 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://twitter.com/a_denkiewicz">Adrian Denkiewicz</a> with <a href="https://doyensec.com/">Doyensec</a> Xiaobye(@xiaobye_tw) of DEVCORE Research Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Spoofing Vulnerability <p>No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-108131 Improper Certificate Validation 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11929 Spoofing 11930 Spoofing 11931 Spoofing 12099 Spoofing 12098 Spoofing 12097 Spoofing 11923 Spoofing 11924 Spoofing 12242 Spoofing 12243 Spoofing 12389 Spoofing 12390 Spoofing 20437 Spoofing 20438 Spoofing 21945 Spoofing 21946 Spoofing 12436 Spoofing 12437 Spoofing 20854 Spoofing 20853 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.1 2026-10-16T07:00:00 <p>CWE added. Informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kerberos Elevation of Privilege Vulnerability <p>Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kerberos Microsoft Yes CVE-2026-108132 Double Free 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12436 12437 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12436 Elevation of Privilege 12437 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Ryan Ries with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability <p>Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Modern Device Management (MDM) Microsoft Yes CVE-2026-108133 Release of Invalid Pointer or Reference 11923 11924 Elevation of Privilege 11923 Elevation of Privilege 11924 Important 11923 Important 11924 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Autopilot Elevation of Privilege Vulnerability <p>Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Autopilot Microsoft Yes CVE-2026-108134 Use After Free 12389 12390 20437 20438 21945 21946 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Brian Perlman with Microsoft Brian Perlman with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Backup Engine Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Backup Engine Microsoft Yes CVE-2026-108135 Improper Link Resolution Before File Access ('Link Following') 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-108136 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/divyasundar16">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Modern Device Management (MDM) Microsoft Yes CVE-2026-108396 Time-of-check Time-of-use (TOCTOU) Race Condition 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Framework Security Feature Bypass Vulnerability <p>Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploits this vulnerability could bypass Windows Defender Application Control (WDAC) enforcement. This could lead to the ability to run unauthorized applications on target systems.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could place a specially crafted .NET assembly on an affected system and register it for loading by a protected process. Successful exploitation could bypass Windows Defender Application Control restrictions and allow the attacker to execute code within the protected process. User interaction is not required.</p> .NET Framework Microsoft Yes CVE-2026-108398 Untrusted Search Path 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 Security Feature Bypass 11723-22028 Security Feature Bypass 11723-10816 Security Feature Bypass 11723-11571 Security Feature Bypass 11677-22029 Security Feature Bypass 11676-22029 Security Feature Bypass 11676-21983 Security Feature Bypass 11676-21984 Security Feature Bypass 11676-11571 Security Feature Bypass 11676-11923 Security Feature Bypass 11863-10378 Security Feature Bypass 11863-10483 Security Feature Bypass 11650-22028 Security Feature Bypass 11650-10378 Security Feature Bypass 11650-10483 Security Feature Bypass 11650-10816 Security Feature Bypass 12079-21983 Security Feature Bypass 12079-21984 Security Feature Bypass 12079-21985 Security Feature Bypass 12079-21986 Security Feature Bypass 12079-12436 Security Feature Bypass 12078-21987 Security Feature Bypass 12079-21988 Security Feature Bypass 12079-11923 Security Feature Bypass 12079-21989 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-22028 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-22029 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-22029 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21983 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21984 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-22028 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21983 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21984 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21985 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21986 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-21987 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21988 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21989 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 James Forshaw with Google Project Zero 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially gain elevated privileges on the host system beyond the guest virtual machine boundary.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Hyper-V Microsoft Yes CVE-2026-108399 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Critical 21945 Critical 21946 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.2 6.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> HEVC Video Extensions Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Windows Codecs Library Microsoft Yes CVE-2026-108400 Integer Overflow or Wraparound 21571-20854 21571-20853 21571-12436 21571-12242 21571-12390 21571-12389 21571-12243 21571-20438 21571-20437 21571-12437 21571-12099 21571-12097 21571-11931 21571-12098 21571-11930 21571-11929 21571-11924 21571-11923 21571-11572 21571-11571 21571-11569 21572 21571-11568 11808 Remote Code Execution 21571-20854 Remote Code Execution 21571-20853 Remote Code Execution 21571-12436 Remote Code Execution 21571-12242 Remote Code Execution 21571-12390 Remote Code Execution 21571-12389 Remote Code Execution 21571-12243 Remote Code Execution 21571-20438 Remote Code Execution 21571-20437 Remote Code Execution 21571-12437 Remote Code Execution 21571-12099 Remote Code Execution 21571-12097 Remote Code Execution 21571-11931 Remote Code Execution 21571-12098 Remote Code Execution 21571-11930 Remote Code Execution 21571-11929 Remote Code Execution 21571-11924 Remote Code Execution 21571-11923 Remote Code Execution 21571-11572 Remote Code Execution 21571-11571 Remote Code Execution 21571-11569 Remote Code Execution 21572 Remote Code Execution 21571-11568 Remote Code Execution 11808 Critical 21571-20854 Critical 21571-20853 Critical 21571-12436 Critical 21571-12242 Critical 21571-12390 Critical 21571-12389 Critical 21571-12243 Critical 21571-20438 Critical 21571-20437 Critical 21571-12437 Critical 21571-12099 Critical 21571-12097 Critical 21571-11931 Critical 21571-12098 Critical 21571-11930 Critical 21571-11929 Critical 21571-11924 Critical 21571-11923 Critical 21571-11572 Critical 21571-11571 Critical 21571-11569 Critical 21572 Critical 21571-11568 Critical 11808 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21571-11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11808 Release Notes https://apps.microsoft.com/store/detail/hevc-video-extensions-from-device-manufacturer/9N4WGH0Z6VHQ?hl=en-us&gl=us 21571-20854 21571-20853 21571-20438 21571-20437 Maybe Security Update 2.5.25.0 https://apps.microsoft.com/store/detail/hevc-video-extensions-from-device-manufacturer/9N4WGH0Z6VHQ?hl=en-us&gl=us 21571-20854 21571-20853 21571-20438 21571-20437 Release Notes Release Notes https://apps.microsoft.com/store/detail/hevc-video-extensions-from-device-manufacturer/9N4WGH0Z6VHQ?hl=en-us&gl=us 21571-12436 21571-12242 21571-12390 21571-12389 21571-12243 21571-12437 21571-12099 21571-12097 21571-11931 21571-12098 21571-11930 21571-11929 21571-11924 21571-11923 21571-11572 21571-11571 21571-11569 21571-11568 Maybe Security Update 2.4.86.0 https://apps.microsoft.com/store/detail/hevc-video-extensions-from-device-manufacturer/9N4WGH0Z6VHQ?hl=en-us&gl=us 21571-12436 21571-12242 21571-12390 21571-12389 21571-12243 21571-12437 21571-12099 21571-12097 21571-11931 21571-12098 21571-11930 21571-11929 21571-11924 21571-11923 21571-11572 21571-11571 21571-11569 21571-11568 Release Notes Release Notes https://apps.microsoft.com/detail/9p3wl96xzmxx 21572 Maybe Security Update 2.4.85.0 https://apps.microsoft.com/detail/9p3wl96xzmxx 21572 Release Notes Release Notes https://apps.microsoft.com/detail/9nmzlz57r3t7 11808 Maybe Security Update 2.4.87.0 https://apps.microsoft.com/detail/9nmzlz57r3t7 11808 Release Notes Anonymous Taewoo (Tae_ω02) 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-108426 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-108427 Heap-based Buffer Overflow Improper Input Validation 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-108428 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-108429 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send a specially crafted Word document and convince a user to open it and use Word's numbering features. Successful exploitation could allow the attacker to execute code in the user's context.</p> Microsoft Office Word Microsoft Yes CVE-2026-108430 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 11951 12440 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send a specially crafted Word document and convince a user to open it and use Word's numbering features. Successful exploitation could allow the attacker to execute code in the user's context.</p> Microsoft Office Word Microsoft Yes CVE-2026-108431 Stack-based Buffer Overflow 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send a specially crafted Word document and convince a user to open it and use Word's numbering features. Successful exploitation could allow the attacker to execute code in the user's context.</p> Microsoft Office Word Microsoft Yes CVE-2026-108432 Heap-based Buffer Overflow 12420 11763 11762 11951 12440 21368 11952 11953 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Security Feature Bypass Vulnerability <p>Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>This update addresses a vulnerability that bypasses OLE mitigations in Microsoft 365 and Microsoft Office which protect users from vulnerable COM/OLE controls.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Word Microsoft Yes CVE-2026-108433 Reliance on Untrusted Inputs in a Security Decision 11951 12440 21368 11952 11953 12421 12420 11763 11762 Security Feature Bypass 11951 Security Feature Bypass 12440 Security Feature Bypass 21368 Security Feature Bypass 11952 Security Feature Bypass 11953 Security Feature Bypass 12421 Security Feature Bypass 12420 Security Feature Bypass 11763 Security Feature Bypass 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes OSORI 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Word Microsoft Yes CVE-2026-108434 Out-of-bounds Read 11951 12440 21368 11952 11953 12421 12420 11763 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> and <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Word Microsoft Yes CVE-2026-108435 Untrusted Pointer Dereference 11951 12440 21368 11952 11953 12421 12420 11763 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> <a href="https://x.com/gr4ss341">grass</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Word Microsoft Yes CVE-2026-108436 Out-of-bounds Read 11951 12440 21368 11952 11953 12421 12420 11763 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-108437 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Word Microsoft Yes CVE-2026-108438 Use After Free 11763 11762 11951 12440 21368 Information Disclosure 11763 Information Disclosure 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by crafting a malicious RTF file. If a user opens the file or it is rendered in the preview pane, the attacker could execute arbitrary code in the user's context.</p> Microsoft Office Word Microsoft Yes CVE-2026-108439 Heap-based Buffer Overflow 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Critical 11951 Critical 12440 Critical 21368 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes vietnq namnp with <a href="https://x.com/vcslab">Viettel Cyber Security</a> 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by crafting a malicious RTF file. If a user opens the file or it is rendered in the preview pane, the attacker could execute arbitrary code in the user's context.</p> Microsoft Office Word Microsoft Yes CVE-2026-108440 Stack-based Buffer Overflow 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Critical 11951 Critical 12440 Critical 21368 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes yhw 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send a specially crafted document and convince a user to open it in Microsoft Word and use the Phonetic Guide feature. Successful exploitation could allow the attacker to execute code in the user's context.</p> Microsoft Office Word Microsoft Yes CVE-2026-108441 Heap-based Buffer Overflow 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send a specially crafted document and convince a user to open it in Microsoft Word and delete a row. Successful exploitation could allow the attacker to execute code in the user's context.</p> Microsoft Office Word Microsoft Yes CVE-2026-108442 Use After Free 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send a specially crafted Word document and convince a user to open it and use Word's numbering features. Successful exploitation could allow the attacker to execute code in the user's context.</p> Microsoft Office Word Microsoft Yes CVE-2026-108443 Off-by-one Error 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send a specially crafted file and convince a user to open it in Microsoft Excel and save it as a web page. Successful exploitation could allow the attacker to execute code in the user's context.</p> Microsoft Office Microsoft Yes CVE-2026-108444 Heap-based Buffer Overflow 11762 11763 11951 11952 11953 12420 12421 12440 21368 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 21368 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send a specially crafted document and convince a user to open it in Microsoft Word and accept a prompt to update its form fields. Successful exploitation could allow the attacker to execute code in the user's context.</p> Microsoft Office Word Microsoft Yes CVE-2026-108445 Stack-based Buffer Overflow 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Excel Microsoft Yes CVE-2026-108446 Use After Free 11951 12440 21368 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-108447 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Outlook Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-108448 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 11951 12440 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 11951 Critical 12440 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab <a href="https://infosec.exchange/@moltenbit">moltenbit</a> with <a href="https://moltenbit.net/">https://moltenbit.net</a> 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send a specially crafted document and convince a user to open it in Microsoft Word and save it in OpenDocument Text format. Successful exploitation could allow the attacker to execute code in the user's context.</p> Microsoft Office Word Microsoft Yes CVE-2026-108449 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 11951 12440 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-108450 Heap-based Buffer Overflow Numeric Truncation Error 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-108451 Numeric Truncation Error Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office SharePoint Remote Code Execution Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker as a Site Owner could execute code remotely on the SharePoint Server.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-108452 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 11961 Remote Code Execution 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office PowerPoint Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-108453 Out-of-bounds Read 11952 11953 12421 12420 11763 11762 11951 12440 21368 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">boolgombear</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">jmini</a> 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office PowerPoint Information Disclosure Vulnerability <p>Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-108454 Buffer Over-read 11951 12440 21368 11952 11953 12421 12420 11763 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">jmini</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">boolgombear</a> 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Microsoft Office PowerPoint Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-108455 Out-of-bounds Read 11952 11953 12421 12420 11763 11762 11951 12440 21368 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">jmini</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">boolgombear</a> 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-15T07:00:00 <p>Information published. This CVE was addressed by updates that were released in October 2026, but the CVE was inadvertently omitted from the October 2026 Security Updates. This is an informational change only. Customers who have already installed the October 2026 updates do not need to take any further action.</p> Azure AI Foundry Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure AI Foundry Microsoft No CVE-2026-108456 Server-Side Request Forgery (SSRF) 12505 Elevation of Privilege 12505 Critical 12505 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12505 <a href="https://x.com/7urb01">7urb0</a> 1.0 2026-10-22T07:00:00 <p>Information published.</p> Microsoft Windows PDF Remote Code Execution Vulnerability <p>Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send a specially crafted email attachment to an affected system that automatically processes PDF content. Successful exploitation could allow the attacker to execute code on the target system. No user interaction is required.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Microsoft Windows PDF Microsoft Yes CVE-2026-108457 Out-of-bounds Write 12243 11930 12097 11924 11923 11931 12242 11929 12437 12436 12098 12099 Remote Code Execution 12243 Remote Code Execution 11930 Remote Code Execution 12097 Remote Code Execution 11924 Remote Code Execution 11923 Remote Code Execution 11931 Remote Code Execution 12242 Remote Code Execution 11929 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 12098 Remote Code Execution 12099 Critical 12243 Critical 11930 Critical 12097 Critical 11924 Critical 11923 Critical 11931 Critical 12242 Critical 11929 Critical 12437 Critical 12436 Critical 12098 Critical 12099 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11930 11931 11929 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11930 11931 11929 5126657 5126657 https://support.microsoft.com/help/5126657 11930 12097 11931 11929 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 Anonymous TunSk &amp; Zhiniang Peng 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Remote Desktop Client Microsoft Yes CVE-2026-108458 Use After Free 12390 12098 20438 12437 12097 12242 20437 11572 10483 10543 10378 11929 10853 12436 10852 20853 20854 10855 11931 12099 11569 11571 11924 12389 11930 11568 10816 11923 10379 12243 Remote Code Execution 12390 Remote Code Execution 12098 Remote Code Execution 20438 Remote Code Execution 12437 Remote Code Execution 12097 Remote Code Execution 12242 Remote Code Execution 20437 Remote Code Execution 11572 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10378 Remote Code Execution 11929 Remote Code Execution 10853 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10855 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11924 Remote Code Execution 12389 Remote Code Execution 11930 Remote Code Execution 11568 Remote Code Execution 10816 Remote Code Execution 11923 Remote Code Execution 10379 Remote Code Execution 12243 Important 12390 Important 12098 Important 20438 Important 12437 Important 12097 Important 12242 Important 20437 Important 11572 Important 10483 Important 10543 Important 10378 Important 11929 Important 10853 Important 12436 Important 10852 Important 20853 Important 20854 Important 10855 Important 11931 Important 12099 Important 11569 Important 11571 Important 11924 Important 12389 Important 11930 Important 11568 Important 10816 Important 11923 Important 10379 Important 12243 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 20438 20437 12389 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12098 12097 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12098 12097 12099 5126657 5126657 https://support.microsoft.com/help/5126657 12098 12097 11929 11931 12099 11930 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11572 11569 11571 11568 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11572 11569 11571 11568 5126651 5126651 https://support.microsoft.com/help/5126651 11572 11569 11571 11568 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10852 10855 10816 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10852 10855 10816 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10852 10855 10816 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Message Queuing Remote Code Execution Vulnerability <p>Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Message Queuing Microsoft Yes CVE-2026-108460 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 byzero, mj with Kunlun Lab &amp; Zhiniang Peng with HUST Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-108461 Use After Free 11568 11569 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 11571 11572 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 11571 Elevation of Privilege 11572 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Important 11571 Important 11572 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain memory address within kernel space. Knowing the exact location of kernel memory could be potentially leveraged by an attacker for other malicious activities.</p> Windows Kernel Microsoft Yes CVE-2026-108462 Exposure of Sensitive System Information to an Unauthorized Control Sphere 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows SmartScreen Security Feature Bypass Vulnerability <p>Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could convince a user to install an application from a specially crafted link. Successful exploitation could bypass SmartScreen's source reputation checks and allow the application to proceed with installation.</p> Windows SmartScreen Microsoft Yes CVE-2026-108463 Improper Resolution of Path Equivalence 12389 12390 20437 20438 21945 21946 20854 20853 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 20854 Security Feature Bypass 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Software Protection Platform (SPP) Elevation of Privilege Vulnerability <p>Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could execute code in the security context of the “NT AUTHORITY\Network Service” account.</p> Software Protection Platform (SPP) Microsoft Yes CVE-2026-108464 Use After Free 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 20854 20853 12389 12390 20437 20438 21945 21946 12436 12437 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 20854 Important 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Delivery Optimization Elevation of Privilege Vulnerability <p>Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could execute code in the security context of the “NT AUTHORITY\Network Service” account.</p> Windows Update Delivery Optimization Microsoft Yes CVE-2026-108465 Use After Free 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 0ccbbf129444eb66344ccafb92b00df4 Anonymous Jonghoi Kim Anonymous Linzishan, Anemone and Zhiniang Peng with HUST TunSk &amp; Zhiniang Peng 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Denial of Service Vulnerability <p>Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.</p> Windows Kernel Microsoft Yes CVE-2026-108466 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12099 Denial of Service 12098 Denial of Service 12097 Denial of Service 11923 Denial of Service 11924 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 20437 Denial of Service 20438 Denial of Service 21945 Denial of Service 21946 Denial of Service 12436 Denial of Service 12437 Denial of Service 20854 Denial of Service 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/xavier-nogues-garcia-93123042/">Xavier Nogues Garcia</a> <a href="https://www.linkedin.com/in/nadav-claude-cohen-8533b2a2/">Nadav Claude Cohen</a> with <a href="https://glow.io/">glow</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PostScript Printer Driver Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low-level access to an affected server could send a specially crafted request to execute code on the server. User interaction is not required.</p> Microsoft PostScript Printer Driver Microsoft Yes CVE-2026-108467 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-108468 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/divyasundar16">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges would an attacker gain by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially leak data from the target enclave or execute code within the context of the target enclave.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>A locally authenticated attacker could run a specially crafted application that submits a malicious report request to an affected VBS enclave. Successful exploitation could allow the attacker to execute code within the target enclave.</p> Windows Virtualization-Based Security (VBS) Enclave Microsoft Yes CVE-2026-108471 Incomplete List of Disallowed Inputs 11571 11568 11569 11572 Elevation of Privilege 11571 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11572 Critical 11571 Critical 11568 Critical 11569 Critical 11572 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11568 11569 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11568 11569 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11568 11569 11572 <a href="https://twitter.com/a_denkiewicz">Adrian Denkiewicz</a> with <a href="https://doyensec.com/">Doyensec</a> 1.1 2026-10-16T07:00:00 <p>CWE added. Informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Virtual Hard Disk (VHD) Miniport Driver Microsoft Yes CVE-2026-109453 Heap-based Buffer Overflow 12389 11572 11571 10379 12242 12390 20854 12436 10543 10378 10855 11931 11568 12097 10816 10853 11929 12243 11569 11930 20853 10852 12099 11924 10483 20438 12098 11923 12437 20437 Elevation of Privilege 12389 Elevation of Privilege 11572 Elevation of Privilege 11571 Elevation of Privilege 10379 Elevation of Privilege 12242 Elevation of Privilege 12390 Elevation of Privilege 20854 Elevation of Privilege 12436 Elevation of Privilege 10543 Elevation of Privilege 10378 Elevation of Privilege 10855 Elevation of Privilege 11931 Elevation of Privilege 11568 Elevation of Privilege 12097 Elevation of Privilege 10816 Elevation of Privilege 10853 Elevation of Privilege 11929 Elevation of Privilege 12243 Elevation of Privilege 11569 Elevation of Privilege 11930 Elevation of Privilege 20853 Elevation of Privilege 10852 Elevation of Privilege 12099 Elevation of Privilege 11924 Elevation of Privilege 10483 Elevation of Privilege 20438 Elevation of Privilege 12098 Elevation of Privilege 11923 Elevation of Privilege 12437 Elevation of Privilege 20437 Important 12389 Important 11572 Important 11571 Important 10379 Important 12242 Important 12390 Important 20854 Important 12436 Important 10543 Important 10378 Important 10855 Important 11931 Important 11568 Important 12097 Important 10816 Important 10853 Important 11929 Important 12243 Important 11569 Important 11930 Important 20853 Important 10852 Important 12099 Important 11924 Important 10483 Important 20438 Important 12098 Important 11923 Important 12437 Important 20437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20438 20437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11572 11571 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11572 11571 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11572 11571 11568 11569 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10379 10378 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10379 10378 5126835 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10543 10483 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10543 10483 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10855 10816 10853 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10855 10816 10853 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10855 10816 10853 10852 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11931 11929 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11931 11929 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11931 12097 11929 11930 12099 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12099 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12099 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 5126655 https://support.microsoft.com/help/5126655 11924 11923 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC <a href="https://imap143.com/">Myungyong Lee</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability <p>Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of credentials.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation requires an affected application to use a specific sign-in handling pattern and rely on default authority discovery without predefined authority metadata. Applications that do not meet both conditions are not exposed to this attack.</p> Microsoft Authentication Library (MSAL) for Node.js Microsoft Yes CVE-2026-109461 Origin Validation Error 21975 21975-12097 Information Disclosure 21975 Information Disclosure 21975-12097 Important 21975 Important 21975-12097 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21975 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21975-12097 Release Notes https://www.npmjs.com/package/@azure/msal-node 21975 21975-12097 Yes Security Update 7.1.0 https://github.com/AzureAD/microsoft-authentication-library-for-js/releases 21975 21975-12097 Release Notes Andrew Federico with <a href="https://www.azuritesolutions.com/">Azurite Solutions, LLC</a> 1.0 2026-10-15T07:00:00 <p>Information published.</p> ASP.NET Core Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> ASP.NET Core Microsoft Yes CVE-2026-109468 Allocation of Resources Without Limits or Throttling 21964-20837 21964-20839 21964-20838 21964-12414 21964-12415 21964-12416 21964-12434 21964-12432 21964-12433 21956 16767 Denial of Service 21964-20837 Denial of Service 21964-20839 Denial of Service 21964-20838 Denial of Service 21964-12414 Denial of Service 21964-12415 Denial of Service 21964-12416 Denial of Service 21964-12434 Denial of Service 21964-12432 Denial of Service 21964-12433 Denial of Service 21956 Denial of Service 16767 Important 21964-20837 Important 21964-20839 Important 21964-20838 Important 21964-12414 Important 21964-12415 Important 21964-12416 Important 21964-12434 Important 21964-12432 Important 21964-12433 Important 21956 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21956 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 Release Notes https://www.nuget.org/packages/System.Formats.Cbor 21964-20837 21964-20839 21964-20838 Security Update 10.0.13 https://www.nuget.org/packages/System.Formats.Cbor 21964-20837 21964-20839 21964-20838 Release Notes Release Notes https://www.nuget.org/packages/System.Formats.Cbor 21964-12414 21964-12415 21964-12416 Security Update 8.0.1 https://www.nuget.org/packages/System.Formats.Cbor 21964-12414 21964-12415 21964-12416 Release Notes Release Notes https://www.nuget.org/packages/System.Formats.Cbor 21964-12434 21964-12432 21964-12433 Security Update 9.0.21 https://www.nuget.org/packages/System.Formats.Cbor 21964-12434 21964-12432 21964-12433 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes thegoldmandm Piotr Pietruszewski 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-16T07:00:00 <p>Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> VM Inspector for Azure Virtual Machines Microsoft No CVE-2026-110063 Improper Link Resolution Before File Access ('Link Following') 22138 Elevation of Privilege 22138 Critical 22138 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 10.0 8.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 22138 <a href="https://twitter.com/wtm_offensi">wtm</a> with <a href="https://offensi.com/">Offensi</a> 1.0 2026-10-22T07:00:00 <p>Information published.</p> Chromium CVE-2026-110136: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110136 Use After Free 21955 21955 Critical 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:21 <p>Information published.</p> Chromium CVE-2026-110137: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110137 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110138: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110138 Use After Free 21955 21955 Important 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110139: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110139 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:25 <p>Information published.</p> Chromium CVE-2026-110140: Type confusion <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110140 Access of Resource Using Incompatible Type ('Type Confusion') 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:29 <p>Information published.</p> Chromium CVE-2026-110141: Observable discrepancy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110141 Observable Discrepancy 21955 21955 Important 21955 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:33 <p>Information published.</p> Chromium CVE-2026-110142: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110142 Use After Free 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110143: Use of uninitialized variable <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110143 Use of Uninitialized Variable 21955 21955 Important 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110144: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110144 Incorrect Authorization 21955 22251 21955 22251 Important 21955 Important 22251 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 22251 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Release Notes 22251 No Security Update 152.0.4191.137 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T18:08:10 <p>Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.</p> Chromium CVE-2026-110145: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110145 Use After Free 21955 21955 Important 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110146: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110146 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Important 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110147: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110147 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:37 <p>Information published.</p> Chromium CVE-2026-110148: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110148 Use After Free 21955 21955 Critical 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:41 <p>Information published.</p> Chromium CVE-2026-110149: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110149 Use After Free 21955 21955 Critical 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110150: Privilege elevation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110150 Execution with Unnecessary Privileges 21955 21955 Important 21955 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110151: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110151 Use After Free 21955 22251 21955 22251 Critical 21955 Critical 22251 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 22251 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Release Notes 22251 No Security Update 152.0.4191.137 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T18:08:17 <p>Information published.</p> Chromium CVE-2026-110152: Buffer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110152 Heap-based Buffer Overflow 21955 21955 Critical 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110153: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110153 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:45 <p>Information published.</p> Chromium CVE-2026-110154: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110154 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110155: Buffer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110155 Heap-based Buffer Overflow 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:50 <p>Information published.</p> Chromium CVE-2026-110156: Incorrect reference resolution <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110156 Use of Incorrectly-Resolved Name or Reference 21955 21955 Important 21955 8.3 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:54 <p>Information published.</p> Chromium CVE-2026-110157: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110157 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:04:58 <p>Information published.</p> Chromium CVE-2026-110158: Use after free in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110158 21933 21933 21933 Release Notes 21933 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes 1.0 2026-10-26T23:16:43 <p>Information published.</p> Chromium CVE-2026-110159: Incorrect authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110159 Incorrect Authorization 21955 22251 21955 22251 Important 21955 Important 22251 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 22251 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Release Notes 22251 No Security Update 152.0.4191.137 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T18:08:22 <p>Information published.</p> Chromium CVE-2026-110160: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110160 Missing Authorization 21955 21955 Important 21955 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:05:04 <p>Information published.</p> Chromium CVE-2026-110161: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110161 Use After Free 21955 21955 Critical 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:05:08 <p>Information published.</p> Chromium CVE-2026-110162: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110162 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:05:11 <p>Information published.</p> Chromium CVE-2026-110163: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110163 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:05:15 <p>Information published.</p> Chromium CVE-2026-110164: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110164 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:05:19 <p>Information published.</p> Chromium CVE-2026-110165: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110165 Use After Free 21955 21955 Critical 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110166: Buffer overflow <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110166 Heap-based Buffer Overflow 21955 22251 21955 22251 Important 21955 Important 22251 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 22251 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Release Notes 22251 No Security Update 152.0.4191.137 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T18:08:28 <p>Information published.</p> Chromium CVE-2026-110167: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110167 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:05:23 <p>Information published.</p> Chromium CVE-2026-110168: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110168 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110169: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110169 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> Chromium CVE-2026-110170: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110170 Use After Free 21955 21955 Important 21955 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:05:27 <p>Information published.</p> Chromium CVE-2026-110171: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110171 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T17:05:31 <p>Information published.</p> Chromium CVE-2026-110172: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110172 Use After Free 21955 22251 21955 22251 Important 21955 Important 22251 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 22251 Release Notes 21955 No Security Update 155.0.4283.60 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Release Notes 22251 No Security Update 152.0.4191.137 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-28T18:08:34 <p>Information published.</p> Chromium CVE-2026-110913: Memory corruption in DOM <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110913 21955 22251 21955 22251 Important 21955 Important 22251 Release Notes 21955 No Security Update 155.0.4283.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Release Notes 22251 No Security Update 152.0.4191.137 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> 2.0 2026-10-28T18:08:39 <p>Information published.</p> Chromium CVE-2026-110914: Memory corruption in Workers <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110914 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-110915: Use after free in Compositing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110915 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-110916: Improper input validation in Desktop <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110916 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 155.0.4283.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-110917: Memory corruption in SVG <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110917 21955 21955 Important 21955 Release Notes 21955 No Security Update 155.0.4283.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-110918: Memory corruption in Core <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110918 21955 22251 21955 22251 Important 21955 Important 22251 Release Notes 21955 No Security Update 155.0.4283.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Release Notes 22251 No Security Update 152.0.4191.137 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> 2.0 2026-10-28T18:08:45 <p>Information published.</p> Chromium CVE-2026-110919: Use after free in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110919 21955 22251 21955 22251 Important 21955 Important 22251 Release Notes 21955 No Security Update 155.0.4283.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Release Notes 22251 No Security Update 152.0.4191.137 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> 2.0 2026-10-28T18:08:51 <p>Information published.</p> Chromium CVE-2026-110920: Memory corruption in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110920 21955 21955 Important 21955 Release Notes 21955 No Security Update 155.0.4283.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> Chromium CVE-2026-110921: Use after free in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110921 21955 22251 21955 22251 Important 21955 Important 22251 Release Notes 21955 No Security Update 155.0.4283.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Release Notes 22251 No Security Update 152.0.4191.137 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> 2.0 2026-10-28T18:08:56 <p>Information published.</p> Chromium CVE-2026-110922: Use after free in Prerender <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-110922 21955 22251 21955 22251 Critical 21955 Critical 22251 Release Notes 21955 No Security Update 155.0.4283.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Release Notes 22251 No Security Update 152.0.4191.137 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-26T07:00:00 <p>Information published.</p> 2.0 2026-10-28T18:09:02 <p>Information published.</p> Google: CVE-2026-111497 Buffer overflow vulnerability in the Brotli decoder <p>Out-of-bounds write in .NET allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why is this third-party CVE included in the Security Update Guide?</strong></p> <p>This CVE concerns a vulnerability in the Brotli library used by .NET. See the <a href="https://www.cve.org/CVERecord?id=CVE-2026-111497">Google security advisory</a> for information about the upstream vulnerability. For background on how Microsoft documents partner-assigned CVEs, see <a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a>.</p> .NET Google Yes CVE-2026-111497 22215-17084 22220 22221 22222 22223 22224 22225 22226 22227 22228 22229 22230 22231 22232 16767 22233 22234 21227 16787 12262 22260 16884-17084 22330-17084 21891-17084 21780-17084 11600 22215-17084 Elevation of Privilege 22220 Elevation of Privilege 22221 Elevation of Privilege 22222 Elevation of Privilege 22223 Elevation of Privilege 22224 Elevation of Privilege 22225 Elevation of Privilege 22226 Elevation of Privilege 22227 Elevation of Privilege 22228 Elevation of Privilege 22229 Elevation of Privilege 22230 Elevation of Privilege 22231 Elevation of Privilege 22232 Elevation of Privilege 16767 Elevation of Privilege 22233 Elevation of Privilege 22234 Elevation of Privilege 21227 Elevation of Privilege 16787 Elevation of Privilege 12262 Elevation of Privilege 22260 16884-17084 22330-17084 21891-17084 21780-17084 Elevation of Privilege 11600 Important 22215-17084 Critical 22220 Critical 22221 Critical 22222 Critical 22223 Critical 22224 Critical 22225 Critical 22226 Critical 22227 Critical 22228 Critical 22229 Critical 22230 Critical 22231 Critical 22232 Critical 16767 Critical 22233 Critical 22234 Important 21227 Important 16787 Important 12262 Important 22260 Critical 16884-17084 Critical 22330-17084 21891-17084 Critical 21780-17084 Important 11600 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22215-17084 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22220 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22221 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22222 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22223 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22224 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22225 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22226 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22227 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22228 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22229 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22230 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22231 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22232 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22233 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22234 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21227 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16787 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12262 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16884-17084 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22330-17084 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21891-17084 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21780-17084 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11600 Release Notes 22215-17084 Security Update 1.2.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22215-17084 Release Notes 5133964 https://dotnet.microsoft.com/download/dotnet/8.0 22220 22221 22222 Yes Security Update 8.0.427 https://support.microsoft.com/help/5133964 22220 22221 22222 5133964 5133965 https://dotnet.microsoft.com/download/dotnet/9.0 22223 22224 22225 Yes Security Update 9.0.320 https://support.microsoft.com/help/5133965 22223 22224 22225 5133965 5133966 https://dotnet.microsoft.com/download/dotnet/10.0 22226 22227 22228 Yes Security Update 10.0.403 https://support.microsoft.com/help/5133966 22226 22227 22228 5133966 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 22229 22230 22231 Yes Security Update 11.0.100-rc.3.26522.148 https://github.com/dotnet/core/blob/main/release-notes/11.0/preview/rc3/11.0.0-rc.3.md 22229 22230 22231 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2019/release-history 22232 Yes Security Update 16.11.61 https://learn.microsoft.com/en-us/visualstudio/releases/2019/release-notes 22232 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.43 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 22233 Yes Security Update 18.11.2 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 22233 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 22234 Yes Security Update 18.12 Insiders 3 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes-insiders 22234 Release Notes Release Notes https://github.com/PowerShell/PowerShell/releases/tag/v7.6.9 21227 Maybe Security Update 7.6.9 https://github.com/PowerShell/Announcements/blob/main/pwsh/2026/10/CVE-2026-111497.md 21227 Release Notes Release Notes https://github.com/PowerShell/PowerShell/releases/tag/v7.5.13 16787 Maybe Security Update 7.5.13 https://github.com/PowerShell/Announcements/blob/main/pwsh/2026/10/CVE-2026-111497.md 16787 Release Notes Release Notes https://github.com/PowerShell/PowerShell/releases/tag/v7.4.22 12262 Maybe Security Update 7.4.22 https://github.com/PowerShell/Announcements/blob/main/pwsh/2026/10/CVE-2026-111497.md 12262 Release Notes Release Notes https://visualstudio.microsoft.com/vs/older-downloads/ 22260 Yes Security Update 15.9.84 https://learn.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes-v15.9 22260 Release Notes Release Notes 16884-17084 22330-17084 21780-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16884-17084 22330-17084 21780-17084 Release Notes Release Notes 21891-17084 Security Update 24.22.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21891-17084 Release Notes Release Notes 11600 Maybe Security Update 11600 Release Notes <p>Brotli decompression is not enabled by default in an out-of-the-box .NET or ASP.NET Core install. Applications must manually opt in to ASP.NET Core request decompression or HttpClient response decompression, or they must manually invoke the Brotli decompression APIs provided by .NET.</p> Henrique Pereira with Microsoft Henrique Pereira with Microsoft <a href="https://www.linkedin.com/in/pethu-kannan-g-3b19b2254">Pethu Kannan G</a> <a href="https://www.linkedin.com/in/mccartypaul/">Paul McCarty</a> with <a href="https://opensourcemalware.com/">OpenSourceMalware</a> Venkateswara Reddy <a href="https://x.com/xamroot">Max Toor</a> with Microsoft <a href="https://www.linkedin.com/in/andy-turner-a4a154419">Andy Turner</a> Anonymous Anonymous Henrique Pereira with Microsoft 1.0 2026-10-25T07:00:00 <p>Information published.</p> 3.0 2026-10-30T01:02:42 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Acknowledgement Updated</p> 5.0 2026-11-01T14:59:32 <p>Information published.</p> 4.0 2026-10-31T01:13:53 <p>Information published.</p> Chromium CVE-2026-112992: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-112992 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:27:35 <p>Information published.</p> Chromium CVE-2026-112993: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-112993 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:27:43 <p>Information published.</p> Chromium CVE-2026-112994: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-112994 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:27:50 <p>Information published.</p> Chromium CVE-2026-112995: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-112995 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:27:56 <p>Information published.</p> Chromium CVE-2026-112996: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-112996 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:28:02 <p>Information published.</p> Chromium CVE-2026-112997: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-112997 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:28:09 <p>Information published.</p> Chromium CVE-2026-112998: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-112998 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:28:15 <p>Information published.</p> Chromium CVE-2026-112999: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-112999 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:28:21 <p>Information published.</p> Chromium CVE-2026-113000: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113000 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:28:28 <p>Information published.</p> Chromium CVE-2026-113001: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113001 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:28:34 <p>Information published.</p> Chromium CVE-2026-113002: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113002 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:28:41 <p>Information published.</p> Chromium CVE-2026-113003: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113003 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:28:47 <p>Information published.</p> Chromium CVE-2026-113004: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113004 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:28:53 <p>Information published.</p> Chromium CVE-2026-113005: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113005 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:28:59 <p>Information published.</p> Chromium CVE-2026-113006: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113006 Out-of-bounds Read 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:04 <p>Information published.</p> Chromium CVE-2026-113007: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113007 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:10 <p>Information published.</p> Chromium CVE-2026-113008: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113008 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:15 <p>Information published.</p> Chromium CVE-2026-113009: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113009 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:22 <p>Information published.</p> Chromium CVE-2026-113010: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113010 Out-of-bounds Read 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:28 <p>Information published.</p> Chromium CVE-2026-113011: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113011 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:33 <p>Information published.</p> Chromium CVE-2026-113012: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113012 Improper Input Validation 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:39 <p>Information published.</p> Chromium CVE-2026-113013: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113013 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:45 <p>Information published.</p> Chromium CVE-2026-113014: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113014 Use After Free 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:51 <p>Information published.</p> Chromium CVE-2026-113015: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113015 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:57 <p>Information published.</p> Chromium CVE-2026-113016: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113016 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:06 <p>Information published.</p> Chromium CVE-2026-113017: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113017 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:13 <p>Information published.</p> Chromium CVE-2026-113018: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113018 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:19 <p>Information published.</p> Chromium CVE-2026-113019: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113019 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:26 <p>Information published.</p> Chromium CVE-2026-113020: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113020 Improper Input Validation 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:32 <p>Information published.</p> Chromium CVE-2026-113021: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113021 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:39 <p>Information published.</p> Chromium CVE-2026-113022: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113022 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:45 <p>Information published.</p> Chromium CVE-2026-113023: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113023 Improper Input Validation 21955 21955 Low 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:52 <p>Information published.</p> Chromium CVE-2026-113024: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113024 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:59 <p>Information published.</p> Chromium CVE-2026-113025: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113025 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:04 <p>Information published.</p> Chromium CVE-2026-113026: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113026 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:10 <p>Information published.</p> Chromium CVE-2026-113027: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113027 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:16 <p>Information published.</p> Chromium CVE-2026-113028: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113028 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:23 <p>Information published.</p> Chromium CVE-2026-113029: Improper access control <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113029 Improper Access Control 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:31 <p>Information published.</p> Chromium CVE-2026-113030: Improper access control <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113030 Improper Access Control 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:36 <p>Information published.</p> Chromium CVE-2026-113031: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113031 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:42 <p>Information published.</p> Chromium CVE-2026-113032: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113032 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:47 <p>Information published.</p> Chromium CVE-2026-113033: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113033 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:53 <p>Information published.</p> Chromium CVE-2026-113034: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113034 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:58 <p>Information published.</p> Chromium CVE-2026-113035: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113035 Out-of-bounds Read 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:04 <p>Information published.</p> Chromium CVE-2026-113036: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113036 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:10 <p>Information published.</p> Chromium CVE-2026-113037: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113037 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:16 <p>Information published.</p> Chromium CVE-2026-113038: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113038 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:24 <p>Information published.</p> Chromium CVE-2026-113039: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113039 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:30 <p>Information published.</p> Chromium CVE-2026-113040: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113040 Improper Input Validation 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:37 <p>Information published.</p> Chromium CVE-2026-113041: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113041 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:46 <p>Information published.</p> Chromium CVE-2026-113042: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113042 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:53 <p>Information published.</p> Chromium CVE-2026-113043: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113043 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:59 <p>Information published.</p> Chromium CVE-2026-113044: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113044 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:07 <p>Information published.</p> Chromium CVE-2026-113045: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113045 Out-of-bounds Read 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:13 <p>Information published.</p> Chromium CVE-2026-113046: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113046 Improper Input Validation 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:18 <p>Information published.</p> Chromium CVE-2026-113047: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113047 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:26 <p>Information published.</p> Chromium CVE-2026-113048: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113048 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:33 <p>Information published.</p> Chromium CVE-2026-113049: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113049 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:39 <p>Information published.</p> Chromium CVE-2026-113050: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113050 Out-of-bounds Read 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:46 <p>Information published.</p> Chromium CVE-2026-113051: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113051 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:53 <p>Information published.</p> Chromium CVE-2026-113052: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113052 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:02 <p>Information published.</p> Chromium CVE-2026-113053: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113053 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:08 <p>Information published.</p> Chromium CVE-2026-113054: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113054 Out-of-bounds Read 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:15 <p>Information published.</p> Chromium CVE-2026-113055: Type confusion <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113055 Access of Resource Using Incompatible Type ('Type Confusion') 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:21 <p>Information published.</p> Chromium CVE-2026-113056: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113056 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:29 <p>Information published.</p> Chromium CVE-2026-113057: Improper access control <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113057 Improper Access Control 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:36 <p>Information published.</p> Chromium CVE-2026-113058: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113058 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:44 <p>Information published.</p> Chromium CVE-2026-113059: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113059 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:49 <p>Information published.</p> Chromium CVE-2026-113060: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113060 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:56 <p>Information published.</p> Chromium CVE-2026-113061: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113061 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:02 <p>Information published.</p> Chromium CVE-2026-113062: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113062 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:08 <p>Information published.</p> Chromium CVE-2026-113063: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113063 Improper Input Validation 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:14 <p>Information published.</p> Chromium CVE-2026-113064: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113064 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:19 <p>Information published.</p> Chromium CVE-2026-113065: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113065 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:27 <p>Information published.</p> Chromium CVE-2026-113066: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113066 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:36 <p>Information published.</p> Chromium CVE-2026-113067: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113067 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:46 <p>Information published.</p> Chromium CVE-2026-113068: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113068 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:56 <p>Information published.</p> Chromium CVE-2026-113069: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113069 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:36:04 <p>Information published.</p> Chromium CVE-2026-113070: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113070 Out-of-bounds Read 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:19 <p>Information published.</p> Chromium CVE-2026-113071: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113071 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:26 <p>Information published.</p> Chromium CVE-2026-113072: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113072 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Critical 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:32 <p>Information published.</p> Chromium CVE-2026-113073: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113073 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:37 <p>Information published.</p> Chromium CVE-2026-113074: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113074 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:43 <p>Information published.</p> Chromium CVE-2026-113075: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113075 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:50 <p>Information published.</p> Chromium CVE-2026-113076: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113076 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:55 <p>Information published.</p> Chromium CVE-2026-113077: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113077 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:01 <p>Information published.</p> Chromium CVE-2026-113078: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113078 Improper Input Validation 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:08 <p>Information published.</p> Chromium CVE-2026-113079: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113079 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:14 <p>Information published.</p> Chromium CVE-2026-113080: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113080 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:20 <p>Information published.</p> Chromium CVE-2026-113081: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113081 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:26 <p>Information published.</p> Chromium CVE-2026-113082: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113082 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:32 <p>Information published.</p> Chromium CVE-2026-113083: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113083 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:38 <p>Information published.</p> Chromium CVE-2026-113084: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113084 Improper Input Validation 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:44 <p>Information published.</p> Chromium CVE-2026-113085: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113085 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:52 <p>Information published.</p> Chromium CVE-2026-113086: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113086 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:59 <p>Information published.</p> Chromium CVE-2026-113087: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113087 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:07 <p>Information published.</p> Chromium CVE-2026-113088: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113088 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:15 <p>Information published.</p> Chromium CVE-2026-113089: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113089 Improper Input Validation 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:23 <p>Information published.</p> Chromium CVE-2026-113090: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113090 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:29 <p>Information published.</p> Chromium CVE-2026-113091: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113091 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:34 <p>Information published.</p> Chromium CVE-2026-113092: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113092 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:29 <p>Information published.</p> Chromium CVE-2026-113093: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113093 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:34 <p>Information published.</p> Chromium CVE-2026-113094: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113094 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:39 <p>Information published.</p> Chromium CVE-2026-113095: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113095 Out-of-bounds Read 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:45 <p>Information published.</p> Chromium CVE-2026-113096: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113096 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:50 <p>Information published.</p> Chromium CVE-2026-113097: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113097 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:29:56 <p>Information published.</p> Chromium CVE-2026-113098: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113098 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:01 <p>Information published.</p> Chromium CVE-2026-113099: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113099 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:08 <p>Information published.</p> Chromium CVE-2026-113100: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113100 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:15 <p>Information published.</p> Chromium CVE-2026-113101: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113101 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:21 <p>Information published.</p> Chromium CVE-2026-113102: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113102 Out-of-bounds Read 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:27 <p>Information published.</p> Chromium CVE-2026-113103: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113103 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:33 <p>Information published.</p> Chromium CVE-2026-113104: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113104 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:39 <p>Information published.</p> Chromium CVE-2026-113105: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113105 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:44 <p>Information published.</p> Chromium CVE-2026-113106: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113106 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:50 <p>Information published.</p> Chromium CVE-2026-113107: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113107 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:30:58 <p>Information published.</p> Chromium CVE-2026-113108: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113108 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:04 <p>Information published.</p> Chromium CVE-2026-113109: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113109 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:09 <p>Information published.</p> Chromium CVE-2026-113110: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113110 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:15 <p>Information published.</p> Chromium CVE-2026-113111: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113111 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:20 <p>Information published.</p> Chromium CVE-2026-113112: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113112 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:25 <p>Information published.</p> Chromium CVE-2026-113113: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113113 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:31 <p>Information published.</p> Chromium CVE-2026-113114: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113114 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:39 <p>Information published.</p> Chromium CVE-2026-113115: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113115 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:44 <p>Information published.</p> Chromium CVE-2026-113116: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113116 Use After Free 21955 21955 Low 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:50 <p>Information published.</p> Chromium CVE-2026-113117: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113117 Improper Input Validation 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:56 <p>Information published.</p> Chromium CVE-2026-113118: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113118 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:02 <p>Information published.</p> Chromium CVE-2026-113119: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113119 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:08 <p>Information published.</p> Chromium CVE-2026-113120: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113120 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:13 <p>Information published.</p> Chromium CVE-2026-113121: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113121 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:18 <p>Information published.</p> Chromium CVE-2026-113122: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113122 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:24 <p>Information published.</p> Chromium CVE-2026-113123: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113123 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:31 <p>Information published.</p> Chromium CVE-2026-113124: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113124 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:38 <p>Information published.</p> Chromium CVE-2026-113125: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113125 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:45 <p>Information published.</p> Chromium CVE-2026-113126: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113126 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:50 <p>Information published.</p> Chromium CVE-2026-113127: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113127 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:56 <p>Information published.</p> Chromium CVE-2026-113128: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113128 Missing Authorization 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:02 <p>Information published.</p> Chromium CVE-2026-113129: Improper access control <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113129 Improper Access Control 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:09 <p>Information published.</p> Chromium CVE-2026-113130: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113130 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:14 <p>Information published.</p> Chromium CVE-2026-113131: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113131 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:20 <p>Information published.</p> Chromium CVE-2026-113132: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113132 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:26 <p>Information published.</p> Chromium CVE-2026-113133: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113133 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:32 <p>Information published.</p> Chromium CVE-2026-113134: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113134 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:37 <p>Information published.</p> Chromium CVE-2026-113135: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113135 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:45 <p>Information published.</p> Chromium CVE-2026-113136: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113136 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:50 <p>Information published.</p> Chromium CVE-2026-113137: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113137 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:56 <p>Information published.</p> Chromium CVE-2026-113138: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113138 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:01 <p>Information published.</p> Chromium CVE-2026-113139: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113139 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:06 <p>Information published.</p> Chromium CVE-2026-113140: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113140 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:12 <p>Information published.</p> Chromium CVE-2026-113141: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113141 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:17 <p>Information published.</p> Chromium CVE-2026-113142: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113142 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:23 <p>Information published.</p> Chromium CVE-2026-113143: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113143 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:29 <p>Information published.</p> Chromium CVE-2026-113144: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113144 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:35 <p>Information published.</p> Chromium CVE-2026-113145: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113145 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:40 <p>Information published.</p> Chromium CVE-2026-113146: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113146 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:46 <p>Information published.</p> Chromium CVE-2026-113147: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113147 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:55 <p>Information published.</p> Chromium CVE-2026-113148: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113148 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:01 <p>Information published.</p> Chromium CVE-2026-113149: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113149 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:07 <p>Information published.</p> Chromium CVE-2026-113150: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113150 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:15 <p>Information published.</p> Chromium CVE-2026-113151: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113151 Out-of-bounds Read 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:22 <p>Information published.</p> Chromium CVE-2026-113152: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113152 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:32 <p>Information published.</p> Chromium CVE-2026-113153: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113153 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:39 <p>Information published.</p> Chromium CVE-2026-113154: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113154 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:48 <p>Information published.</p> Chromium CVE-2026-113155: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113155 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:57 <p>Information published.</p> Chromium CVE-2026-113156: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113156 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:36:05 <p>Information published.</p> Chromium CVE-2026-113157: Information leak <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113157 Exposure of Sensitive Information to an Unauthorized Actor 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:17 <p>Information published.</p> Chromium CVE-2026-113158: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113158 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:23 <p>Information published.</p> Chromium CVE-2026-113159: Improper access control <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113159 Improper Access Control 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:28 <p>Information published.</p> Chromium CVE-2026-113160: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113160 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:34 <p>Information published.</p> Chromium CVE-2026-113161: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113161 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:41 <p>Information published.</p> Chromium CVE-2026-113162: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113162 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:47 <p>Information published.</p> Chromium CVE-2026-113163: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113163 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:53 <p>Information published.</p> Chromium CVE-2026-113164: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113164 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:00 <p>Information published.</p> Chromium CVE-2026-113165: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113165 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:06 <p>Information published.</p> Chromium CVE-2026-113166: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113166 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:11 <p>Information published.</p> Chromium CVE-2026-113167: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113167 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:17 <p>Information published.</p> Chromium CVE-2026-113168: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113168 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:24 <p>Information published.</p> Chromium CVE-2026-113169: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113169 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:31 <p>Information published.</p> Chromium CVE-2026-113170: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113170 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:36 <p>Information published.</p> Chromium CVE-2026-113171: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113171 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:42 <p>Information published.</p> Chromium CVE-2026-113172: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113172 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:48 <p>Information published.</p> Chromium CVE-2026-113173: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113173 Improper Input Validation 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:56 <p>Information published.</p> Chromium CVE-2026-113174: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113174 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:05 <p>Information published.</p> Chromium CVE-2026-113175: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113175 Improper Input Validation 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:10 <p>Information published.</p> Chromium CVE-2026-113176: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113176 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:15 <p>Information published.</p> Chromium CVE-2026-113177: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113177 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:21 <p>Information published.</p> Chromium CVE-2026-113178: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113178 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:26 <p>Information published.</p> Chromium CVE-2026-113179: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113179 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:32 <p>Information published.</p> Chromium CVE-2026-113180: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113180 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:37 <p>Information published.</p> Chromium CVE-2026-113181: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113181 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:45 <p>Information published.</p> Chromium CVE-2026-113182: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113182 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:51 <p>Information published.</p> Chromium CVE-2026-113183: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113183 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:57 <p>Information published.</p> Chromium CVE-2026-113184: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113184 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:04 <p>Information published.</p> Chromium CVE-2026-113185: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113185 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:09 <p>Information published.</p> Chromium CVE-2026-113186: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113186 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:15 <p>Information published.</p> Chromium CVE-2026-113187: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113187 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:20 <p>Information published.</p> Chromium CVE-2026-113188: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113188 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:27 <p>Information published.</p> Chromium CVE-2026-113189: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113189 Use After Free 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:33 <p>Information published.</p> Chromium CVE-2026-113190: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113190 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:39 <p>Information published.</p> Chromium CVE-2026-113191: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113191 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:44 <p>Information published.</p> Chromium CVE-2026-113192: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113192 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:37 <p>Information published.</p> Chromium CVE-2026-113193: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113193 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:43 <p>Information published.</p> Chromium CVE-2026-113194: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113194 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:50 <p>Information published.</p> Chromium CVE-2026-113195: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113195 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:31:55 <p>Information published.</p> Chromium CVE-2026-113196: Improper access control <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113196 Improper Access Control 21955 21955 Moderate 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:04 <p>Information published.</p> Chromium CVE-2026-113197: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113197 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:10 <p>Information published.</p> Chromium CVE-2026-113198: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113198 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:16 <p>Information published.</p> Chromium CVE-2026-113199: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113199 Out-of-bounds Read 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:24 <p>Information published.</p> Chromium CVE-2026-113200: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113200 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:30 <p>Information published.</p> Chromium CVE-2026-113201: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113201 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:37 <p>Information published.</p> Chromium CVE-2026-113202: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113202 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:44 <p>Information published.</p> Chromium CVE-2026-113203: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113203 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:51 <p>Information published.</p> Chromium CVE-2026-113204: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113204 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:32:58 <p>Information published.</p> Chromium CVE-2026-113205: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113205 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:05 <p>Information published.</p> Chromium CVE-2026-113206: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113206 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:12 <p>Information published.</p> Chromium CVE-2026-113207: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113207 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:18 <p>Information published.</p> Chromium CVE-2026-113208: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113208 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:25 <p>Information published.</p> Chromium CVE-2026-113209: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113209 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:31 <p>Information published.</p> Chromium CVE-2026-113210: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113210 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:38 <p>Information published.</p> Chromium CVE-2026-113211: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113211 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:45 <p>Information published.</p> Chromium CVE-2026-113212: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113212 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:54 <p>Information published.</p> Chromium CVE-2026-113213: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113213 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:01 <p>Information published.</p> Chromium CVE-2026-113214: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113214 Improper Input Validation 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:07 <p>Information published.</p> Chromium CVE-2026-113215: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113215 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:14 <p>Information published.</p> Chromium CVE-2026-113216: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113216 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:20 <p>Information published.</p> Chromium CVE-2026-113217: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113217 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:27 <p>Information published.</p> Chromium CVE-2026-113218: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113218 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:33 <p>Information published.</p> Chromium CVE-2026-113219: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113219 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:40 <p>Information published.</p> Chromium CVE-2026-113220: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113220 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:49 <p>Information published.</p> Chromium CVE-2026-113221: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113221 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:56 <p>Information published.</p> Chromium CVE-2026-113222: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113222 Use After Free 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:02 <p>Information published.</p> Chromium CVE-2026-113223: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113223 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:10 <p>Information published.</p> Chromium CVE-2026-113224: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113224 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:17 <p>Information published.</p> Chromium CVE-2026-113225: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113225 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:29 <p>Information published.</p> Chromium CVE-2026-113226: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113226 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:37 <p>Information published.</p> Chromium CVE-2026-113227: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113227 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:50 <p>Information published.</p> Chromium CVE-2026-113228: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113228 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:36:00 <p>Information published.</p> Chromium CVE-2026-113229: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113229 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:16 <p>Information published.</p> Chromium CVE-2026-113230: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113230 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:22 <p>Information published.</p> Chromium CVE-2026-113231: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113231 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:30 <p>Information published.</p> Chromium CVE-2026-113232: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113232 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:37 <p>Information published.</p> Chromium CVE-2026-113233: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113233 Out-of-bounds Read 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:46 <p>Information published.</p> Chromium CVE-2026-113234: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113234 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:54 <p>Information published.</p> Chromium CVE-2026-113235: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113235 Improper Input Validation 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:04 <p>Information published.</p> Chromium CVE-2026-113236: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113236 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:11 <p>Information published.</p> Chromium CVE-2026-113237: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113237 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:18 <p>Information published.</p> Chromium CVE-2026-113238: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113238 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:29 <p>Information published.</p> Chromium CVE-2026-113239: Range error <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113239 Incorrect Access of Indexable Resource ('Range Error') 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:35 <p>Information published.</p> Chromium CVE-2026-113240: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113240 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:41 <p>Information published.</p> Chromium CVE-2026-113241: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113241 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:49 <p>Information published.</p> Chromium CVE-2026-113242: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113242 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:57 <p>Information published.</p> Chromium CVE-2026-113243: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113243 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:05 <p>Information published.</p> Chromium CVE-2026-113244: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113244 Improper Input Validation 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:11 <p>Information published.</p> Chromium CVE-2026-113245: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113245 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:18 <p>Information published.</p> Chromium CVE-2026-113246: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113246 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:24 <p>Information published.</p> Chromium CVE-2026-113247: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113247 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:31 <p>Information published.</p> Chromium CVE-2026-113248: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113248 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:38 <p>Information published.</p> Chromium CVE-2026-113249: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113249 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:46 <p>Information published.</p> Chromium CVE-2026-113250: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113250 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:54 <p>Information published.</p> Chromium CVE-2026-113251: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113251 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:02 <p>Information published.</p> Chromium CVE-2026-113252: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113252 Improper Input Validation 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:09 <p>Information published.</p> Chromium CVE-2026-113253: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113253 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:16 <p>Information published.</p> Chromium CVE-2026-113254: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113254 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:22 <p>Information published.</p> Chromium CVE-2026-113255: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113255 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:30 <p>Information published.</p> Chromium CVE-2026-113256: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113256 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:36 <p>Information published.</p> Chromium CVE-2026-113257: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113257 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:41 <p>Information published.</p> Chromium CVE-2026-113258: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113258 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:48 <p>Information published.</p> Chromium CVE-2026-113259: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113259 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:55 <p>Information published.</p> Chromium CVE-2026-113260: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113260 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:41:01 <p>Information published.</p> Chromium CVE-2026-113261: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113261 Use After Free 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:41:11 <p>Information published.</p> Chromium CVE-2026-113262: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113262 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:41:18 <p>Information published.</p> Chromium CVE-2026-113263: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113263 Use After Free 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:41:26 <p>Information published.</p> Chromium CVE-2026-113264: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113264 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:41:33 <p>Information published.</p> Chromium CVE-2026-113265: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113265 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:41:40 <p>Information published.</p> Chromium CVE-2026-113266: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113266 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:41:47 <p>Information published.</p> Chromium CVE-2026-113267: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113267 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:41:54 <p>Information published.</p> Chromium CVE-2026-113268: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113268 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:42:00 <p>Information published.</p> Chromium CVE-2026-113269: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113269 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:42:06 <p>Information published.</p> Chromium CVE-2026-113270: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113270 Use After Free 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:42:38 <p>Information published.</p> Chromium CVE-2026-113271: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113271 Use After Free 21955 21955 Critical 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:42:46 <p>Information published.</p> Chromium CVE-2026-113272: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113272 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:42:54 <p>Information published.</p> Chromium CVE-2026-113273: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113273 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:42:59 <p>Information published.</p> Chromium CVE-2026-113274: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113274 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:43:06 <p>Information published.</p> Chromium CVE-2026-113275: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113275 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:43:12 <p>Information published.</p> Chromium CVE-2026-113276: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113276 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:43:18 <p>Information published.</p> Chromium CVE-2026-113277: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113277 Out-of-bounds Read 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:43:24 <p>Information published.</p> Chromium CVE-2026-113278: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113278 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:43:30 <p>Information published.</p> Chromium CVE-2026-113279: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113279 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Critical 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:43:36 <p>Information published.</p> Chromium CVE-2026-113280: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113280 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Critical 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:43:42 <p>Information published.</p> Chromium CVE-2026-113281: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113281 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:43:49 <p>Information published.</p> Chromium CVE-2026-113282: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113282 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:43:57 <p>Information published.</p> Chromium CVE-2026-113283: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113283 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:44:04 <p>Information published.</p> Chromium CVE-2026-113284: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113284 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:44:11 <p>Information published.</p> Chromium CVE-2026-113285: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113285 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:44:17 <p>Information published.</p> Chromium CVE-2026-113286: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113286 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:44:24 <p>Information published.</p> Chromium CVE-2026-113287: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113287 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:44:30 <p>Information published.</p> Chromium CVE-2026-113288: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113288 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:44:36 <p>Information published.</p> Chromium CVE-2026-113289: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113289 Improper Input Validation 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:44:42 <p>Information published.</p> Chromium CVE-2026-113290: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113290 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:44:51 <p>Information published.</p> Chromium CVE-2026-113291: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113291 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:44:58 <p>Information published.</p> Chromium CVE-2026-113292: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113292 Improper Input Validation 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:34 <p>Information published.</p> Chromium CVE-2026-113293: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113293 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:40 <p>Information published.</p> Chromium CVE-2026-113294: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113294 Improper Input Validation 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:48 <p>Information published.</p> Chromium CVE-2026-113295: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113295 Out-of-bounds Read 21955 21955 Important 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:33:54 <p>Information published.</p> Chromium CVE-2026-113296: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113296 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:04 <p>Information published.</p> Chromium CVE-2026-113297: Improper access control <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113297 Improper Access Control 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:09 <p>Information published.</p> Chromium CVE-2026-113298: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113298 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:16 <p>Information published.</p> Chromium CVE-2026-113299: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113299 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:22 <p>Information published.</p> Chromium CVE-2026-113300: Out of bounds write <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113300 Out-of-bounds Write 21955 21955 Low 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:29 <p>Information published.</p> Chromium CVE-2026-113301: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113301 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:34 <p>Information published.</p> Chromium CVE-2026-113302: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113302 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:41 <p>Information published.</p> Chromium CVE-2026-113303: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113303 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Critical 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:48 <p>Information published.</p> Chromium CVE-2026-113304: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113304 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:34:54 <p>Information published.</p> Chromium CVE-2026-113305: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113305 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:00 <p>Information published.</p> Chromium CVE-2026-113306: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113306 Improper Input Validation 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:06 <p>Information published.</p> Chromium CVE-2026-113307: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113307 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:14 <p>Information published.</p> Chromium CVE-2026-113308: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113308 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:21 <p>Information published.</p> Chromium CVE-2026-113309: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113309 Out-of-bounds Read 21955 21955 Important 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:33 <p>Information published.</p> Chromium CVE-2026-113310: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113310 Out-of-bounds Read 21955 21955 Important 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:41 <p>Information published.</p> Chromium CVE-2026-113311: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113311 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:35:54 <p>Information published.</p> Chromium CVE-2026-113312: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113312 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:36:01 <p>Information published.</p> Chromium CVE-2026-113313: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113313 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:12 <p>Information published.</p> Chromium CVE-2026-113314: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113314 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:18 <p>Information published.</p> Chromium CVE-2026-113315: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113315 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:24 <p>Information published.</p> Chromium CVE-2026-113316: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113316 Improper Input Validation 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:31 <p>Information published.</p> Chromium CVE-2026-113317: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113317 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:36 <p>Information published.</p> Chromium CVE-2026-113318: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113318 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:42 <p>Information published.</p> Chromium CVE-2026-113319: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113319 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:48 <p>Information published.</p> Chromium CVE-2026-113320: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113320 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:37:54 <p>Information published.</p> Chromium CVE-2026-113321: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113321 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:01 <p>Information published.</p> Chromium CVE-2026-113322: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113322 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:06 <p>Information published.</p> Chromium CVE-2026-113323: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113323 Use After Free 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:12 <p>Information published.</p> Chromium CVE-2026-113324: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113324 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:18 <p>Information published.</p> Chromium CVE-2026-113325: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113325 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:28 <p>Information published.</p> Chromium CVE-2026-113326: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113326 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:33 <p>Information published.</p> Chromium CVE-2026-113327: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113327 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:39 <p>Information published.</p> Chromium CVE-2026-113328: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113328 Improper Input Validation 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:45 <p>Information published.</p> Chromium CVE-2026-113329: Out of bounds read <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113329 Out-of-bounds Read 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:38:53 <p>Information published.</p> Chromium CVE-2026-113330: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113330 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:01 <p>Information published.</p> Chromium CVE-2026-113331: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113331 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Low 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:10 <p>Information published.</p> Chromium CVE-2026-113332: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113332 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:17 <p>Information published.</p> Chromium CVE-2026-113333: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113333 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:23 <p>Information published.</p> Chromium CVE-2026-113334: Improper input validation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113334 Improper Input Validation 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:30 <p>Information published.</p> Chromium CVE-2026-113335: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113335 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:37 <p>Information published.</p> Chromium CVE-2026-113336: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113336 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Important 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:44 <p>Information published.</p> Chromium CVE-2026-113337: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113337 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:50 <p>Information published.</p> Chromium CVE-2026-113338: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113338 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:39:57 <p>Information published.</p> Chromium CVE-2026-113339: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113339 Use After Free 21955 21955 Important 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:04 <p>Information published.</p> Chromium CVE-2026-113340: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113340 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:10 <p>Information published.</p> Chromium CVE-2026-113341: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113341 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Critical 21955 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:16 <p>Information published.</p> Chromium CVE-2026-113342: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113342 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:24 <p>Information published.</p> Chromium CVE-2026-113343: Memory corruption <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113343 Improper Restriction of Operations within the Bounds of a Memory Buffer 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:31 <p>Information published.</p> Chromium CVE-2026-113344: Use after free <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-113344 Use After Free 21955 21955 Moderate 21955 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21955 Release Notes 21955 No Security Update 156.0.4314.42 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-22T19:40:37 <p>Information published.</p> ASP.NET Core Elevation of Privilege Vulnerability <p>Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain the highest privileges on the system.</p> ASP.NET Core Microsoft Yes CVE-2026-114148 Incorrect Default Permissions 22220 22221 22222 22223 22224 22225 22226 22227 22228 22229 22230 22231 22237 22239 Elevation of Privilege 22220 Elevation of Privilege 22221 Elevation of Privilege 22222 Elevation of Privilege 22223 Elevation of Privilege 22224 Elevation of Privilege 22225 Elevation of Privilege 22226 Elevation of Privilege 22227 Elevation of Privilege 22228 Elevation of Privilege 22229 Elevation of Privilege 22230 Elevation of Privilege 22231 Elevation of Privilege 22237 Elevation of Privilege 22239 Important 22220 Important 22221 Important 22222 Important 22223 Important 22224 Important 22225 Important 22226 Important 22227 Important 22228 Important 22229 Important 22230 Important 22231 Important 22237 Important 22239 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5133964 https://dotnet.microsoft.com/download/dotnet/8.0 22220 22221 22222 Yes Security Update 8.0.427 https://support.microsoft.com/help/5133964 22220 22221 22222 5133964 5133965 https://dotnet.microsoft.com/download/dotnet/9.0 22223 22224 22225 Yes Security Update 9.0.320 https://support.microsoft.com/help/5133965 22223 22224 22225 5133965 5133966 https://dotnet.microsoft.com/download/dotnet/10.0 22226 22227 22228 Yes Security Update 10.0.403 https://support.microsoft.com/help/5133966 22226 22227 22228 5133966 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 22229 22230 22231 Yes Security Update 11.0.100-rc.3 https://github.com/dotnet/core/blob/main/release-notes/11.0/preview/rc3/11.0.0-rc.3.md 22229 22230 22231 Release Notes 5133965 https://dotnet.microsoft.com/download/dotnet/9.0 22237 Yes Security Update 9.0.22 https://support.microsoft.com/help/5133965 22237 5133965 5133966 https://dotnet.microsoft.com/download/dotnet/10.0 22239 Yes Security Update 10.0.403-servicing.26523.112 https://support.microsoft.com/help/5133966 22239 5133966 <a href="https://www.linkedin.com/in/alen-cheung/">Alen Cheung</a> 1.0 2026-10-25T07:00:00 <p>Information published.</p> Visual Studio Spoofing Vulnerability <p>Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), and integrity (I:H), but could lead to no loss of availability (A:N). What does that mean for this vulnerability?</strong></p> <p>Exploiting this vulnerability allows an attacker to view highly sensitive resource information (C:H) and results in a total loss of protection for that data (I:H), but does not provide the capability to impact resource availability.</p> Visual Studio Microsoft Yes CVE-2026-118147 Improper Certificate Validation 22233 22260 22232 16767 Spoofing 22233 Spoofing 22260 Spoofing 22232 Spoofing 16767 Important 22233 Important 22260 Important 22232 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 22233 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 22232 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 16767 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 22233 Yes Security Update 18.11.3 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 22233 Release Notes Release Notes https://visualstudio.microsoft.com/vs/older-downloads/ 22260 Yes Security Update 15.9.84 https://learn.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes-v15.9 22260 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2019/release-history 22232 Yes Security Update 16.11.62 https://learn.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11 22232 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.44 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Praveen Sethuraman 1.0 2026-10-30T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118304 Improper input validation in SVG <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118304 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118305 Memory corruption in Turbolev <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118305 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118306 Memory corruption in FileSystem <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118306 22251 22251 Critical 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118307 Use after free in Paint <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118307 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118308 Use after free in SVG <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118308 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118310 Improper input validation in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118310 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118311 Memory corruption in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118311 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118312 Memory corruption in Paint <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118312 22251 22251 Moderate 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118313 Use after free in Video <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118313 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118315 Improper input validation in SVG <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118315 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118316 Improper input validation in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118316 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118317 Memory corruption in HTML <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118317 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118318 Improper access control in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118318 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118319 Memory corruption in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118319 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118320 Memory corruption in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118320 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118322 Memory corruption in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118322 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118327 Memory corruption in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118327 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118328 Improper input validation in WebRTC <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118328 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118329 Improper input validation in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118329 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118330 Use after free in Browser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118330 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118331 Improper input validation in FileAPI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118331 22251 22251 Critical 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118332 Improper input validation in Compositing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118332 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118333 Missing authorization in Video <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118333 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118334 Use after free in ImageCapture <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118334 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118335 Improper input validation in Metrics <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118335 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118336 Improper input validation in Headless <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118336 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118337 Improper access control in Forms <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118337 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118338 Use after free in Animation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118338 22251 22251 Moderate 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118339 Use after free in Animation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118339 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118340 Memory corruption in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118340 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118341 Use after free in Modularization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118341 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118342 Out of bounds write in Editing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118342 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118343 Improper input validation in ReadingList <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118343 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118344 Use after free in Layout <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118344 22251 22251 Critical 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118345 Use after free in PDFium <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118345 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118346 Use after free in Compositing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118346 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118347 Use after free in FileSystem <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118347 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118348 Improper input validation in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118348 22251 22251 Critical 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118349 Memory corruption in Payments <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118349 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118350 Use after free in Turbolev <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118350 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118351 Memory corruption in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118351 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118352 Memory corruption in Cache <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118352 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118353 Use after free in Paint <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118353 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118354 Improper input validation in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118354 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118355 Improper input validation in Command <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118355 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118356 Use after free in WTF <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118356 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118357 Use after free in FileSystem <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118357 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118358 Memory corruption in WebAudio <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118358 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Chromium: CVE-2026-118359 Memory corruption in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-118359 22251 22251 Important 22251 Release Notes 22251 No Security Update 156.0.4314.56 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L),but lead to no loss of availability (A:N) and integrity (I:N)? What does that mean for this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality) but not all resources within the impacted component may be divulged to the attacker. The attacker cannot make changes to disclosed information (Integrity) or limit access to the resource (Availability).</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This vulnerability requires that a user have multiple browser instances open of the affected version of Microsoft Edge (Chromium-based), one of which is a specially crafted website hosted by the attacker. The user would need to access the URL of the malicious website and then click a popup displayed on that site.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-20942 Improper Restriction of Rendered UI Layers or Frames 21955 Spoofing 21955 Low 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 156.0.4314.42 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes tiebuchen 1.0 2026-10-27T07:00:00 <p>Information published.</p> Raw Image Extension Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by convincing a user to navigate to a folder containing a specially crafted RAW image file. The vulnerability can be triggered when Windows generates a thumbnail or preview; the user does not need to open the file. Successful exploitation could allow remote code execution.</p> Windows Raw Image Extension Cisco Talos Yes CVE-2026-21413 Heap-based Buffer Overflow 11804-10853 11804-10852 11804-21994 11804-21995 11804-11931 11804-11930 11804-11929 11804-21996 11804-21997 11804-21998 11804-21999 11804-22000 11804-22001 11804-22002 11804-22003 11804-22004 11804-22005 11804-11673 11804-11570 11804-11569 11804-11568 11804-21989 11804-21945 11804-21946 Remote Code Execution 11804-10853 Remote Code Execution 11804-10852 Remote Code Execution 11804-21994 Remote Code Execution 11804-21995 Remote Code Execution 11804-11931 Remote Code Execution 11804-11930 Remote Code Execution 11804-11929 Remote Code Execution 11804-21996 Remote Code Execution 11804-21997 Remote Code Execution 11804-21998 Remote Code Execution 11804-21999 Remote Code Execution 11804-22000 Remote Code Execution 11804-22001 Remote Code Execution 11804-22002 Remote Code Execution 11804-22003 Remote Code Execution 11804-22004 Remote Code Execution 11804-22005 Remote Code Execution 11804-11673 Remote Code Execution 11804-11570 Remote Code Execution 11804-11569 Remote Code Execution 11804-11568 Remote Code Execution 11804-21989 Remote Code Execution 11804-21945 Remote Code Execution 11804-21946 Critical 11804-10853 Critical 11804-10852 Critical 11804-21994 Critical 11804-21995 Critical 11804-11931 Critical 11804-11930 Critical 11804-11929 Critical 11804-21996 Critical 11804-21997 Critical 11804-21998 Critical 11804-21999 Critical 11804-22000 Critical 11804-22001 Critical 11804-22002 Critical 11804-22003 Critical 11804-22004 Critical 11804-22005 Critical 11804-11673 Critical 11804-11570 Critical 11804-11569 Critical 11804-11568 Critical 11804-21989 Critical 11804-21945 Critical 11804-21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21994 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21995 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21996 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21997 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21998 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21999 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22000 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22001 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22002 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22003 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22004 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22005 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11673 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11570 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21989 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21946 Release Notes 11804-10853 11804-10852 11804-21994 11804-21995 11804-11931 11804-11930 11804-11929 11804-21998 11804-21999 11804-22000 11804-22001 11804-22002 11804-22003 11804-22004 11804-22005 11804-11673 11804-11570 11804-11569 11804-11568 Maybe Security Update 2.4.36.0 https://support.microsoft.com/en-us/accounts-billing/get-updates-for-apps-and-games-in-microsoft-store 11804-10853 11804-10852 11804-21994 11804-21995 11804-11931 11804-11930 11804-11929 11804-21998 11804-21999 11804-22000 11804-22001 11804-22002 11804-22003 11804-22004 11804-22005 11804-11673 11804-11570 11804-11569 11804-11568 Release Notes Release Notes 11804-21996 11804-21997 11804-21989 11804-21945 11804-21946 Maybe Security Update 2.5.35.0 https://support.microsoft.com/en-us/accounts-billing/get-updates-for-apps-and-games-in-microsoft-store 11804-21996 11804-21997 11804-21989 11804-21945 11804-21946 Release Notes Anonymous Anonymous Juan Pablo Lopez Yacubian 1.0 2026-10-13T07:00:00 <p>Information published.</p> UEFI Secure Boot Security Feature Bypass Vulnerability <p>Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>Successfully exploiting this vulnerability could bypass UEFI Secure Boot, a security feature designed to ensure that only trusted software runs when a device starts. This could allow an attacker with local administrator privileges or physical access to run untrusted code early in the boot process, before the operating system’s protections are active.</p> Windows UEFI Microsoft Yes CVE-2026-49785 Improper Resource Shutdown or Release 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Denial of Service Vulnerability <p>Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.</p> .NET Microsoft Yes CVE-2026-58280 Uncontrolled Recursion 12434 12432 12433 12414 12415 12416 20837 20839 20838 21783 21785 21784 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 21956 16767 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 Denial of Service 12434 Denial of Service 12432 Denial of Service 12433 Denial of Service 12414 Denial of Service 12415 Denial of Service 12416 Denial of Service 20837 Denial of Service 20839 Denial of Service 20838 Denial of Service 21783 Denial of Service 21785 Denial of Service 21784 Denial of Service 12079-21983 Denial of Service 12079-21984 Denial of Service 12079-21985 Denial of Service 12079-21986 Denial of Service 12079-12436 Denial of Service 12078-21987 Denial of Service 12079-21988 Denial of Service 12079-11923 Denial of Service 12079-21989 Denial of Service 21956 Denial of Service 16767 Denial of Service 2472-21987 Denial of Service 2472-10378 Denial of Service 2472-10483 Denial of Service 11723-22028 Denial of Service 11723-10816 Denial of Service 11723-11571 Denial of Service 11677-22029 Denial of Service 11676-22029 Denial of Service 11676-21983 Denial of Service 11676-21984 Denial of Service 11676-11571 Denial of Service 11676-11923 Denial of Service 11863-10378 Denial of Service 11863-10483 Denial of Service 11650-22028 Denial of Service 11650-10378 Denial of Service 11650-10483 Denial of Service 11650-10816 Important 12434 Important 12432 Important 12433 Important 12414 Important 12415 Important 12416 Important 20837 Important 20839 Important 20838 Important 21783 Important 21785 Important 21784 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Important 21956 Important 16767 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20837 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21783 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21785 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21784 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21985 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21986 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21988 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21989 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 12432 12433 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 12432 12433 5130035 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 12415 12416 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 12415 12416 5130034 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 20839 20838 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 20839 20838 5130036 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 21785 21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/447 21783 21785 21784 Release Notes 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 <a href="https://www.linkedin.com/in/leandrosbatista21/">Leandro Batista</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Remote Desktop Security Feature Bypass Vulnerability <p>Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to create a SHA1 hash collision successfully.</p> Windows Remote Desktop Microsoft Yes CVE-2026-59116 Use of a Broken or Risky Cryptographic Algorithm 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11924 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12242 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12243 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10378 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10379 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 11924 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 11924 5099540 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20853 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Perception Simulation Service Elevation of Privilege Vulnerability <p>Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Perception Simulation Service Microsoft Yes CVE-2026-61931 Use After Free 21945 21946 11568 11569 11571 11572 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 Anonymous Anonymous o &quot;maka with Tu Longfeng&quot;. Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Backup Engine Information Disclosure Vulnerability <p>Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.</p> Windows Backup Engine Microsoft Yes CVE-2026-62687 Improper Link Resolution Before File Access ('Link Following') 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 21945 21946 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-62765 Access of Resource Using Incompatible Type ('Type Confusion') 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 149.0.4022.62 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security nightmare 1.0 2026-10-27T07:00:00 <p>Information published.</p> Linux Kernel Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>What do I have to do to protect myself from this vulnerability?</strong></p> <p>To help protect your systems from this vulnerability, update your Linux kernel to a version that includes the upstream fix for this issue. The fix has already been accepted upstream and will be included in newer kernel releases.</p> <p>If your environment uses a Linux distribution that has not yet incorporated the updated kernel version, you should monitor your distribution vendor’s security advisories and apply the appropriate security update as soon as it becomes available. Some distributions may release the fix immediately through security updates, while others may include it in a future kernel package or maintenance release.</p> <p>Organizations that maintain custom kernels or remain on older kernel branches may need to manually backport or apply the upstream patch according to their standard patch management and validation processes.</p> <p>As a general best practice, ensure systems are regularly updated with the latest security patches and kernel releases provided by your operating system vendor.</p> Linux Kernel Microsoft Yes CVE-2026-62840 Time-of-check Time-of-use (TOCTOU) Race Condition 22030 Elevation of Privilege 22030 Critical 22030 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely Release Notes https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=35f0f0a2536a4d604b4dbad92c85c4a8fdebb870 22030 Maybe Security Update 7.3 https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=35f0f0a2536a4d604b4dbad92c85c4a8fdebb870 22030 Release Notes Jonathan Guerin with Microsoft Vincent Yin with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows SmartScreen Tampering Vulnerability <p>Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.</p> Windows SmartScreen Microsoft Yes CVE-2026-62879 Missing Authentication for Critical Function 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Tampering 21945 Tampering 21946 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Remote Code Execution Vulnerability <p>Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by connecting to an affected SQL Server and submitting a specially crafted query or request that triggers a memory corruption condition, allowing the attacker to execute code on the server. Authentication is required; user interaction is not required.</p> SQL Server Microsoft Yes CVE-2026-65674 Deserialization of Untrusted Data 22009 22010 11821 12147 20748 22008 Remote Code Execution 22009 Remote Code Execution 22010 Remote Code Execution 11821 Remote Code Execution 12147 Remote Code Execution 20748 Remote Code Execution 22008 Important 22009 Important 22010 Important 11821 Important 12147 Important 20748 Important 22008 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 <a href="https://twitter.com/chudypb">Piotr Bazydło (@chudypb)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Information Disclosure Vulnerability <p>Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of credentials.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> .NET Microsoft Yes CVE-2026-66822 Insertion of Sensitive Information Into Sent Data 21783 21785 21784 20837 20839 20838 12415 12414 12416 12432 12433 16767 12434 21956 Information Disclosure 21783 Information Disclosure 21785 Information Disclosure 21784 Information Disclosure 20837 Information Disclosure 20839 Information Disclosure 20838 Information Disclosure 12415 Information Disclosure 12414 Information Disclosure 12416 Information Disclosure 12432 Information Disclosure 12433 Information Disclosure 16767 Information Disclosure 12434 Information Disclosure 21956 Important 21783 Important 21785 Important 21784 Important 20837 Important 20839 Important 20838 Important 12415 Important 12414 Important 12416 Important 12432 Important 12433 Important 16767 Important 12434 Important 21956 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21783 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21785 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21784 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20837 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20839 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20838 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12415 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12414 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12416 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12432 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12433 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 16767 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12434 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21956 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 21785 21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/448 21783 21785 21784 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 20839 20838 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 20839 20838 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12415 12414 12416 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12415 12414 12416 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12432 12433 12434 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12432 12433 12434 5130035 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes <a href="https://caveeroo.dev/">caveeroo</a> with <a href="https://www.tarlogic.com/">Tarlogic</a> <a href="https://www.linkedin.com/in/jiheun-kim/">l8BL</a> with <a href="https://www.enki.co.kr/">ENKI WhiteHat</a> Attila.Cs(zerodaybugs.com) with https://zerodaybugs.com/ Anonymous Harkenzo Raffaello Tamagnini <a href="https://www.linkedin.com/in/leandrosbatista21/">Leandro Batista</a> <a href="https://www.linkedin.com/in/kevin-sch/">Kevin Schmidt</a> Piotr Pietruszewski Anonymous <a href="https://x.com/crusader_sec">Brent Woodard</a> with <a href="https://crusaderproxy.com/">Crusader Security, LLC</a> <a href="https://linkedin.com/in/weeraphat-srisutham">Weeraphat Srisutham</a> Lucas Futures <a href="https://www.linkedin.com/in/wenhan-zhou-4a949b21a/">Wenhan Zhou</a> jhanks Anonymous <a href="https://x.com/ky0tofu">Ky0toFu</a> dogyun Anonymous Mohammad S. Badr 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by connecting to an affected SQL Server and submitting a specially crafted query or request that triggers a memory corruption condition, allowing the attacker to execute code on the server. Authentication is required; user interaction is not required.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> SQL Server Microsoft Yes CVE-2026-67625 Heap-based Buffer Overflow 22007 11478 11821 12147 20748 22009 22010 22008 Remote Code Execution 22007 Remote Code Execution 11478 Remote Code Execution 11821 Remote Code Execution 12147 Remote Code Execution 20748 Remote Code Execution 22009 Remote Code Execution 22010 Remote Code Execution 22008 Important 22007 Important 11478 Important 11821 Important 12147 Important 20748 Important 22009 Important 22010 Important 22008 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 5128496 https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b 5122774 22007 Yes Security Update 14.0.3560.2 https://support.microsoft.com/help/5128496 22007 5128496 5128496 https://support.microsoft.com/help/5128496 22007 5128497 https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b 5122775 11478 Yes Security Update 14.0.2140.2 https://support.microsoft.com/help/5128497 11478 5128497 5128497 https://support.microsoft.com/help/5128497 11478 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Red Team Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Denial of Service Vulnerability <p>Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> SQL Server Microsoft Yes CVE-2026-67626 Uncontrolled Resource Consumption 22009 22010 12147 20748 Denial of Service 22009 Denial of Service 22010 Denial of Service 12147 Denial of Service 20748 Important 22009 Important 22010 Important 12147 Important 20748 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12147 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20748 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Information Disclosure Vulnerability <p>Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> SQL Server Microsoft Yes CVE-2026-67628 Out-of-bounds Read 11478 11821 12147 20748 22007 22008 22009 22010 Information Disclosure 11478 Information Disclosure 11821 Information Disclosure 12147 Information Disclosure 20748 Information Disclosure 22007 Information Disclosure 22008 Information Disclosure 22009 Information Disclosure 22010 Important 11478 Important 11821 Important 12147 Important 20748 Important 22007 Important 22008 Important 22009 Important 22010 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.9 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11478 4.9 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11821 4.9 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12147 4.9 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20748 5128497 https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b 5122775 11478 Yes Security Update 14.0.2140.2 https://support.microsoft.com/help/5128497 11478 5128497 5128497 https://support.microsoft.com/help/5128497 11478 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128496 https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b 5122774 22007 Yes Security Update 14.0.3560.2 https://support.microsoft.com/help/5128496 22007 5128496 5128496 https://support.microsoft.com/help/5128496 22007 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows kernel32.dll Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows kernel32.dll Microsoft Yes CVE-2026-68836 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Gabriela Kote 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker who can execute code in a low-privilege AppContainer could exploit this vulnerability locally to escape the sandbox and elevate privileges on the affected system. No additional user interaction is required.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> SQL Server Microsoft Yes CVE-2026-68883 Heap-based Buffer Overflow 22007 20748 11478 11821 22008 22009 22010 12147 Elevation of Privilege 22007 Elevation of Privilege 20748 Elevation of Privilege 11478 Elevation of Privilege 11821 Elevation of Privilege 22008 Elevation of Privilege 22009 Elevation of Privilege 22010 Elevation of Privilege 12147 Important 22007 Important 20748 Important 11478 Important 11821 Important 22008 Important 22009 Important 22010 Important 12147 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 5128496 https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b 5122774 22007 Yes Security Update 14.0.3560.2 https://support.microsoft.com/help/5128496 22007 5128496 5128496 https://support.microsoft.com/help/5128496 22007 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128497 https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b 5122775 11478 Yes Security Update 14.0.2140.2 https://support.microsoft.com/help/5128497 11478 5128497 5128497 https://support.microsoft.com/help/5128497 11478 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Red Team yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Graphic Fonts Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Graphic Fonts Microsoft Yes CVE-2026-69326 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Error Reporting Microsoft Yes CVE-2026-69354 Heap-based Buffer Overflow Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5122876 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876 5120238 11568 11569 11571 11572 Yes Security Update 10.0.17763.9245 https://support.microsoft.com/help/5122876 11568 11569 11571 11572 5122876 5122882 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122882 5120242 11923 11924 Yes Security Update 10.0.20348.5622 https://support.microsoft.com/help/5122882 11923 11924 5122882 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 11929 11930 11931 Yes Security Update 10.0.19044.7725 https://support.microsoft.com/help/5122878 11929 11930 11931 5122878 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 12097 12098 12099 Yes Security Update 10.0.19045.7725 https://support.microsoft.com/help/5122878 12097 12098 12099 5122878 5122871 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122871 5120233 12437 12436 Yes Security Update 10.0.26100.33438 https://support.microsoft.com/help/5122871 12437 12436 5122871 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 20437 20438 Yes Security Update 10.0.26200.9445 https://support.microsoft.com/help/5124008 20437 20438 5124008 5122880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122880 5120240 12242 12243 Yes Security Update 10.0.22631.7582 https://support.microsoft.com/help/5122880 12242 12243 5122880 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 12389 12390 Yes Security Update 10.0.26100.9445 https://support.microsoft.com/help/5124008 12389 12390 5124008 5124012 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124012 5121000 20853 20854 Yes Security Update 10.0.28000.2954 https://support.microsoft.com/help/5124012 20853 20854 5124012 5123099 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123099 5120418 10852 10853 10816 10855 Yes Security Update 10.0.14393.9512 https://support.microsoft.com/help/5123099 10852 10853 10816 10855 5123099 5123065 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123065 5120386 10378 10379 Yes Security Update 6.2.9200.26349 https://support.microsoft.com/help/5123065 10378 10379 5123065 5123066 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123066 5120385 10483 10543 Yes Security Update 6.3.9600.23398 https://support.microsoft.com/help/5123066 10483 10543 5123066 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Error Reporting Microsoft Yes CVE-2026-69363 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5122876 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876 5120238 11568 11569 11571 11572 Yes Security Update 10.0.17763.9245 https://support.microsoft.com/help/5122876 11568 11569 11571 11572 5122876 5122882 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122882 5120242 11923 11924 Yes Security Update 10.0.20348.5622 https://support.microsoft.com/help/5122882 11923 11924 5122882 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 11929 11930 11931 Yes Security Update 10.0.19044.7725 https://support.microsoft.com/help/5122878 11929 11930 11931 5122878 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 12097 12098 12099 Yes Security Update 10.0.19045.7725 https://support.microsoft.com/help/5122878 12097 12098 12099 5122878 5122871 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122871 5120233 12437 12436 Yes Security Update 10.0.26100.33438 https://support.microsoft.com/help/5122871 12437 12436 5122871 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 20437 20438 Yes Security Update 10.0.26200.9445 https://support.microsoft.com/help/5124008 20437 20438 5124008 5122880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122880 5120240 12242 12243 Yes Security Update 10.0.22631.7582 https://support.microsoft.com/help/5122880 12242 12243 5122880 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 12389 12390 Yes Security Update 10.0.26100.9445 https://support.microsoft.com/help/5124008 12389 12390 5124008 5124012 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124012 5121000 20853 20854 Yes Security Update 10.0.28000.2954 https://support.microsoft.com/help/5124012 20853 20854 5124012 5123099 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123099 5120418 10852 10853 10816 10855 Yes Security Update 10.0.14393.9512 https://support.microsoft.com/help/5123099 10852 10853 10816 10855 5123099 5123065 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123065 5120386 10378 10379 Yes Security Update 6.2.9200.26349 https://support.microsoft.com/help/5123065 10378 10379 5123065 5123066 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123066 5120385 10483 10543 Yes Security Update 6.3.9600.23398 https://support.microsoft.com/help/5123066 10483 10543 5123066 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Visual Studio Code Remote Code Execution Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Visual Studio Code Microsoft Yes CVE-2026-69370 Improper Neutralization of Special Elements used in a Command ('Command Injection') 11622 Remote Code Execution 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Security Update 1.141.1 https://code.visualstudio.com/updates/v1_141 11622 Release Notes <a href="https://www.linkedin.com/in/tarek-nakkouch/">Tarek Nakkouch</a> vurmusum <a href="https://x.com/l4wio">Luat Nguyen</a> with <a href="https://cyberjutsu.io/">CyberJutsu Academy</a> <a href="https://x.com/vulda17">vulda1</a> with Viettel Cyber Security Oran with <a href="https://paloaltonetworks.com/">Palo Alto Networks</a> vurmusum Hiln Oran with <a href="https://paloaltonetworks.com/">Palo Alto Networks</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Elevation of Privilege Vulnerability <p>Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Error Reporting Microsoft Yes CVE-2026-69387 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Azure SRE Agent Elevation of Privilege Vulnerability <p>Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure SRE Agent Microsoft No CVE-2026-69435 Server-Side Request Forgery (SSRF) 21304 Elevation of Privilege 21304 Critical 21304 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 21304 <a href="https://www.linkedin.com/in/asaf-cohen-4103b75b/">Asaf Cohen</a> with <a href="https://xbreach.ai/">XBREACH.AI</a> 1.0 2026-10-08T07:00:00 <p>Information published.</p> Windows Enterprise App Management Elevation of Privilege Vulnerability <p>Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Enterprise App Management Microsoft Yes CVE-2026-69452 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.1 6.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 ʌ!ɔ⊥ojv 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Microsoft Azure Attestation service and Device Health Attestation Service Microsoft Yes CVE-2026-69454 Out-of-bounds Read 11571 11572 11923 11924 12437 12436 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-69471 Heap-based Buffer Overflow Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Key Storage Provider Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Key Storage Provider Microsoft Yes CVE-2026-69506 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz <a href="https://www.linkedin.com/in/hyunalee0327/">Hyuna Lee (@PaduckLee)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows iSCSI Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints.</p> Windows iSCSI Microsoft Yes CVE-2026-69521 Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5122876 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876 5120238 11568 11569 11571 11572 Yes Security Update 10.0.17763.9245 https://support.microsoft.com/help/5122876 11568 11569 11571 11572 5122876 5122882 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122882 5120242 11923 11924 Yes Security Update 10.0.20348.5622 https://support.microsoft.com/help/5122882 11923 11924 5122882 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 11929 11930 11931 Yes Security Update 10.0.19044.7725 https://support.microsoft.com/help/5122878 11929 11930 11931 5122878 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 12097 12098 12099 Yes Security Update 10.0.19045.7725 https://support.microsoft.com/help/5122878 12097 12098 12099 5122878 5122871 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122871 5120233 12437 12436 Yes Security Update 10.0.26100.33438 https://support.microsoft.com/help/5122871 12437 12436 5122871 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 20437 20438 Yes Security Update 10.0.26200.9445 https://support.microsoft.com/help/5124008 20437 20438 5124008 5122880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122880 5120240 12242 12243 Yes Security Update 10.0.22631.7582 https://support.microsoft.com/help/5122880 12242 12243 5122880 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 12389 12390 Yes Security Update 10.0.26100.9445 https://support.microsoft.com/help/5124008 12389 12390 5124008 5124012 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124012 5121000 20853 20854 Yes Security Update 10.0.28000.2954 https://support.microsoft.com/help/5124012 20853 20854 5124012 5123099 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123099 5120418 10852 10853 10816 10855 Yes Security Update 10.0.14393.9512 https://support.microsoft.com/help/5123099 10852 10853 10816 10855 5123099 5123065 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123065 5120386 10378 10379 Yes Security Update 6.2.9200.26349 https://support.microsoft.com/help/5123065 10378 10379 5123065 5123066 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123066 5120385 10483 10543 Yes Security Update 6.3.9600.23398 https://support.microsoft.com/help/5123066 10483 10543 5123066 yhw &amp; txz Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-28T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Microsoft Azure Attestation service and Device Health Attestation Service Microsoft Yes CVE-2026-69577 Out-of-bounds Read 11571 11572 11923 11924 12437 12436 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability <p>Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Program Compatibility Assistant Service Microsoft Yes CVE-2026-69596 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Update Microsoft Yes CVE-2026-69633 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows iSCSI Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints.</p> Windows iSCSI Microsoft Yes CVE-2026-69634 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 yhw &amp; txz Linzishan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from Medium Integrity Level to Local Service.</p> Windows Installer Microsoft Yes CVE-2026-69635 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows libarchive Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints.</p> Windows Libarchive Microsoft Yes CVE-2026-69639 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Key Distribution Center Security Feature Bypass Vulnerability <p>Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker could bypass the Kerberos service ticketing feature which performs user access control checks.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p> Windows Key Distribution Center Microsoft Yes CVE-2026-69640 Incorrect Authorization 21945 21946 11568 11569 11571 11572 11923 11924 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows iSCSI Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows iSCSI Microsoft Yes CVE-2026-69644 Exposure of Sensitive System Information to an Unauthorized Control Sphere 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Key Distribution Center Elevation of Privilege Vulnerability <p>Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Key Distribution Center Microsoft Yes CVE-2026-69650 Improper Verification of Cryptographic Signature 11568 11569 11571 11572 11923 11924 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Denial of Service Vulnerability <p>Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.</p> .NET Microsoft Yes CVE-2026-69651 Inefficient Algorithmic Complexity 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 12434 12432 12433 21783 21785 21784 20837 20839 20838 12414 12415 12416 21956 16767 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 Denial of Service 2472-21987 Denial of Service 2472-10378 Denial of Service 2472-10483 Denial of Service 11723-22028 Denial of Service 11723-10816 Denial of Service 11723-11571 Denial of Service 11677-22029 Denial of Service 11676-22029 Denial of Service 11676-21983 Denial of Service 11676-21984 Denial of Service 11676-11571 Denial of Service 11676-11923 Denial of Service 11863-10378 Denial of Service 11863-10483 Denial of Service 11650-22028 Denial of Service 11650-10378 Denial of Service 11650-10483 Denial of Service 11650-10816 Denial of Service 12434 Denial of Service 12432 Denial of Service 12433 Denial of Service 21783 Denial of Service 21785 Denial of Service 21784 Denial of Service 20837 Denial of Service 20839 Denial of Service 20838 Denial of Service 12414 Denial of Service 12415 Denial of Service 12416 Denial of Service 21956 Denial of Service 16767 Denial of Service 12079-21983 Denial of Service 12079-21984 Denial of Service 12079-21985 Denial of Service 12079-21986 Denial of Service 12079-12436 Denial of Service 12078-21987 Denial of Service 12079-21988 Denial of Service 12079-11923 Denial of Service 12079-21989 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Important 12434 Important 12432 Important 12433 Important 21783 Important 21785 Important 21784 Important 20837 Important 20839 Important 20838 Important 12414 Important 12415 Important 12416 Important 21956 Important 16767 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21783 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21785 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21784 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20837 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21985 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21986 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21988 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21989 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 12432 12433 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 12432 12433 5130035 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 21785 21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/449 21783 21785 21784 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 20839 20838 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 20839 20838 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 12415 12416 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 12415 12416 5130034 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 <a href="https://x.com/soaj1664ashar">Dr.-Ing Ashar Javed</a> <a href="https://www.linkedin.com/in/kevin-sch/">Kevin Schmidt</a> <a href="https://www.linkedin.com/in/leandrosbatista21">Leandro Batista</a> <a href="https://www.linkedin.com/in/jiheun-kim/">l8BL</a> with <a href="https://enki.co.kr/">ENKI WhiteHat</a> <a href="https://www.linkedin.com/in/alen-cheung/">Alen Cheung</a> <a href="https://www.linkedin.com/in/fcripolles/">Francisco Jos&#233; Carot Ripoll&#233;s (RipFran)</a> with <a href="https://www.linkedin.com/company/kpmg-espana/">KPMG Spain</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Update Microsoft Yes CVE-2026-69673 Improper Link Resolution Before File Access ('Link Following') 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Network File System Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized heap memory.</p> Windows Network File System Microsoft Yes CVE-2026-69675 Out-of-bounds Read 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 0ccbbf129444eb66344ccafb92b00df4 Pwnforr777 3072 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows iSCSI Remote Code Execution Vulnerability <p>Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints.</p> Windows iSCSI Microsoft Yes CVE-2026-69705 Out-of-bounds Write 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21946 Remote Code Execution 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Linzishan yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Update Microsoft Yes CVE-2026-69718 Improper Neutralization of Special Elements used in a Command ('Command Injection') 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows iSCSI Information Disclosure Vulnerability <p>Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows iSCSI Microsoft Yes CVE-2026-69721 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Elevation of Privilege Vulnerability <p>Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Update Microsoft Yes CVE-2026-69733 Untrusted Search Path 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Credential Manager Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Credential Manager Microsoft Yes CVE-2026-69736 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability <p>Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Program Compatibility Assistant Service Microsoft Yes CVE-2026-69743 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Elevation of Privilege Vulnerability <p>Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Storage Microsoft Yes CVE-2026-69763 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storport Miniport Driver Remote Code Execution Vulnerability <p>Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Windows Storport Miniport Driver Microsoft Yes CVE-2026-69765 Use After Free 12437 12436 Remote Code Execution 12437 Remote Code Execution 12436 Important 12437 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 Netanel Ben Simon with Microsoft (STORM) 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Elevation of Privilege Vulnerability <p>Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Storage Microsoft Yes CVE-2026-69766 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Elevation of Privilege Vulnerability <p>External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Update Microsoft Yes CVE-2026-69783 External Control of File Name or Path 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires that the target system be set up in a specific manner and the attacker to have knowledge of that setup.</p> Reliable Multicast Transport Driver (RMCAST) Microsoft Yes CVE-2026-69789 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5122876 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876 5120238 11568 11569 11571 11572 Yes Security Update 10.0.17763.9245 https://support.microsoft.com/help/5122876 11568 11569 11571 11572 5122876 5122882 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122882 5120242 11923 11924 Yes Security Update 10.0.20348.5622 https://support.microsoft.com/help/5122882 11923 11924 5122882 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 11929 11930 11931 Yes Security Update 10.0.19044.7725 https://support.microsoft.com/help/5122878 11929 11930 11931 5122878 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 12097 12098 12099 Yes Security Update 10.0.19045.7725 https://support.microsoft.com/help/5122878 12097 12098 12099 5122878 5122871 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122871 5120233 12437 12436 Yes Security Update 10.0.26100.33438 https://support.microsoft.com/help/5122871 12437 12436 5122871 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 20437 20438 Yes Security Update 10.0.26200.9445 https://support.microsoft.com/help/5124008 20437 20438 5124008 5122880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122880 5120240 12242 12243 Yes Security Update 10.0.22631.7582 https://support.microsoft.com/help/5122880 12242 12243 5122880 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 12389 12390 Yes Security Update 10.0.26100.9445 https://support.microsoft.com/help/5124008 12389 12390 5124008 5124012 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124012 5121000 20853 20854 Yes Security Update 10.0.28000.2954 https://support.microsoft.com/help/5124012 20853 20854 5124012 5123099 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123099 5120418 10852 10853 10816 10855 Yes Security Update 10.0.14393.9512 https://support.microsoft.com/help/5123099 10852 10853 10816 10855 5123099 5123065 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123065 5120386 10378 10379 Yes Security Update 6.2.9200.26349 https://support.microsoft.com/help/5123065 10378 10379 5123065 5123066 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123066 5120385 10483 10543 Yes Security Update 6.3.9600.23398 https://support.microsoft.com/help/5123066 10483 10543 5123066 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; npc0vo</a> with https://diffract-ai.com/ <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Clipboard Server Elevation of Privilege Vulnerability <p>Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained (&quot;sandboxed&quot;) execution environment to a Medium Integrity Level. Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Clipboard Server Microsoft Yes CVE-2026-69795 NULL Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Wired AutoConfig Service Elevation of Privilege Vulnerability <p>Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Wired AutoConfig Service Microsoft Yes CVE-2026-69798 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 k0shl using GLM from z.ai (https://z.ai) ```[fanxiaocao](https://x.com/TinySecEx) and [pjf](https://weibo.com/jfpan)``` 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-11-02T08:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability <p>Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>A high attack complexity means that successful exploitation is complex and time‑consuming, requiring significant effort and precise conditions for an attacker to reliably exploit the vulnerability.</p> Network Device Enrollment Service (NDES) Microsoft Yes CVE-2026-69802 Weak Authentication 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12436 Remote Code Execution 12437 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10816 Critical 10855 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12436 Critical 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 mad31k 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows DHCP Server Microsoft Yes CVE-2026-69830 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Linzishan Jonghoi Kim <a href="https://x.com/bo13oy">bo13oy</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Certificates Elevation of Privilege Vulnerability <p>Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained (&quot;sandboxed&quot;) execution environment to a Medium Integrity Level. Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Certificates Microsoft Yes CVE-2026-69840 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Certificates Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained (&quot;sandboxed&quot;) execution environment to a Medium Integrity Level. Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> Windows Certificates Microsoft Yes CVE-2026-69850 Untrusted Pointer Dereference 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Elevation of Privilege Vulnerability <p>Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Storage Microsoft Yes CVE-2026-69856 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> SQLite Elevation of Privilege Vulnerability <p>Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> SQLite Microsoft Yes CVE-2026-69867 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 cyanbamboo 1.0 2026-10-13T07:00:00 <p>Information published.</p> Azure DevOps Information Disclosure Vulnerability <p>Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>This vulnerability could expose a sign-in access token for a user’s work account. If disclosed, that token could allow access to data and services that the user is authorized to use, potentially including sensitive organizational information.</p> Azure DevOps Microsoft Yes CVE-2026-69877 Origin Validation Error 12103 21864 Information Disclosure 12103 Information Disclosure 21864 Important 12103 Important 21864 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12103 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21864 Release Notes https://github.com/Azure/azure-devops-cli-extension/releases/download/20260820.1/azure_devops-1.0.7-py2.py3-none-any.whl 12103 21864 Security Update 1.0.7 https://github.com/Azure/azure-devops-cli-extension/releases/tag/20260820.1 12103 21864 Release Notes <a href="https://x.com/ky0tofu">Ky0toFu</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Desktop Window Manager Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Desktop Window Manager Microsoft Yes CVE-2026-69880 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> yhw &amp; txz Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Elevation of Privilege Vulnerability <p>Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Update Microsoft Yes CVE-2026-69882 Untrusted Search Path 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows iSCSI Remote Code Execution Vulnerability <p>Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints.</p> Windows iSCSI Microsoft Yes CVE-2026-69883 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21946 Remote Code Execution 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> Anemone 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows GDI Elevation of Privilege Vulnerability <p>Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows GDI Microsoft Yes CVE-2026-69884 Buffer Over-read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Thanatos Tian (HKPolyU) &amp; npc0vo 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Imaging Component Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints.</p> Windows Imaging Component Microsoft Yes CVE-2026-69886 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-69898 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract <a href="https://x.com/immortalp0ny">Sergey immortalp0ny Tarasov</a> with <a href="https://global.ptsecurity.com/">Positive Technologies</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-69902 Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows AppX Deployment Service Tampering Vulnerability <p>Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally.</p> <p><strong>What could an attacker achieve by exploiting this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability to make unauthorized modifications to protected system data. This could allow the attacker to alter system state or configuration beyond their normal privileges.</p> Windows AppX Deployment Service Microsoft Yes CVE-2026-69905 Missing Authorization 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Tampering 21945 Tampering 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/johan-wahyudi-&#128737;️-077a94b9/">Johan Wahyudi</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft COM for Windows Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft COM for Windows Microsoft Yes CVE-2026-69909 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows TCP/IP Remote Code Execution Vulnerability <p>Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows TCP/IP Microsoft Yes CVE-2026-69913 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Owen McCullough with MSRC V&amp;M Products 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows AppX Deployment Service Information Disclosure Vulnerability <p>Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows AppX Deployment Service Microsoft Yes CVE-2026-69914 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-69915 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-69916 Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Core Messaging Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Core Messaging Microsoft Yes CVE-2026-69918 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 namnp with <a href="https://x.com/vcslab">Viettel Cyber Security</a> pwn2addr <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Cryptographic Services Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of initialized or uninitialized memory in the process heap.</p> Windows Cryptographic Services Microsoft Yes CVE-2026-69919 Out-of-bounds Read 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-69922 Out-of-bounds Read 11762 11763 11952 11953 12420 12421 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 Release Notes 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes 11952 11953 Security Update 16.0.14334.20878 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes 12420 12421 Security Update 16.0.17932.20934 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="http://github.com/fkxgood">passion!</a> Haein Lee with KAIST Hacking Lab 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows AI Elevation of Privilege Vulnerability <p>Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows AI Microsoft Yes CVE-2026-69923 Uncontrolled Search Path Element 12389 12390 20437 20438 20854 12436 12437 20853 21945 21946 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 20854 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12389 Important 12390 Important 20437 Important 20438 Important 20854 Important 12436 Important 12437 Important 20853 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous BUG-Fly 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Desktop Window Manager Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Desktop Window Manager Microsoft Yes CVE-2026-69926 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Arjun Vasudeva with MSRC Exploit Research Team Killer Queen Killer Queen yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Storage Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Microsoft Yes CVE-2026-69931 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Spaceport.sys Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Spaceport.sys Microsoft Yes CVE-2026-69934 Integer Overflow or Wraparound Improper Input Validation 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg &amp; 2st</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Elevation of Privilege Vulnerability <p>Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Microsoft Yes CVE-2026-69935 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Client for NFS Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Windows Client for NFS Microsoft Yes CVE-2026-69940 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Remote Code Execution Vulnerability <p>Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.</p> Windows Overlay Filter Microsoft Yes CVE-2026-69942 Buffer Over-read 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 21945 Remote Code Execution 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Remote Code Execution Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low-level access to an affected server could send a specially crafted request to execute code on the server. User interaction is not required.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-69943 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 11961 Remote Code Execution 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows AppX Deployment Extensions Elevation of Privilege Vulnerability <p>Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>In this case, a successful attack could be performed from a low privilege <a href="https://docs.microsoft.com/windows/win32/secauthz/appcontainer-isolation">AppContainer</a>. The attacker could elevate their privileges and execute code at a higher integrity level than that of the AppContainer execution environment.</p> Windows AppX Deployment Extensions Microsoft Yes CVE-2026-69945 Missing Authorization 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://twitter.com/ecthr0s">George Hughey</a> with MSRC Vulnerabilities &amp; Mitigations 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.</p> Windows Overlay Filter Microsoft Yes CVE-2026-69947 Heap-based Buffer Overflow 21945 21946 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST Anonymous <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Client for NFS Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Client for NFS Microsoft Yes CVE-2026-69949 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Elevation of Privilege Vulnerability <p>Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Overlay Filter Microsoft Yes CVE-2026-69950 Buffer Over-read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126649 5122874 10852 10853 10816 10855 Yes Security Update 10.0.14393.9596 https://support.microsoft.com/help/5126649 10852 10853 10816 10855 5126649 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5127357 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127357 5123602 10378 10379 Yes Security Update 6.2.9200.26426 https://support.microsoft.com/help/5127357 10378 10379 5127357 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127356 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127356 5123499 10483 10543 Yes Security Update 6.3.9600.23457 https://support.microsoft.com/help/5127356 10483 10543 5127356 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Overlay Filter Microsoft Yes CVE-2026-69952 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Elevation of Privilege Vulnerability <p>Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Overlay Filter Microsoft Yes CVE-2026-69953 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Information Disclosure Vulnerability <p>Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Overlay Filter Microsoft Yes CVE-2026-69954 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21946 Information Disclosure 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST GraVity0 6ucy 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Client for NFS Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Windows Client for NFS Microsoft Yes CVE-2026-69955 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Overlay Filter Microsoft Yes CVE-2026-69957 Integer Overflow or Wraparound Buffer Over-read 21946 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 21945 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.</p> Windows Overlay Filter Microsoft Yes CVE-2026-69958 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST Anonymous <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Remote Code Execution Vulnerability <p>Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.</p> Windows Overlay Filter Microsoft Yes CVE-2026-69959 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21946 Remote Code Execution 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Kernel Streaming Service Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Streaming Service Microsoft Yes CVE-2026-69963 Heap-based Buffer Overflow Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Kernel Streaming Service Driver Elevation of Privilege Vulnerability <p>Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>For an attacker to exploit this vulnerability, they would need to have knowledge of a specific operation that triggers a memory allocation failure, specifically a use after free.</p> Microsoft Streaming Service Microsoft Yes CVE-2026-69964 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Kernel Streaming Service Driver Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Streaming Service Microsoft Yes CVE-2026-69966 Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 13ye01h4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Overlay Filter Microsoft Yes CVE-2026-69967 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21946 Information Disclosure 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows libarchive Tampering Vulnerability <p>Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.</p> <p><strong>What could an attacker achieve by exploiting this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability to make unauthorized modifications to protected system data. This could allow the attacker to alter system state or configuration beyond their normal privileges.</p> Windows Libarchive Microsoft Yes CVE-2026-69968 Relative Path Traversal 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Tampering 21945 Tampering 21946 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 XlabAI Team of Tencent Xuanwu Lab, Atuin Automated Vulnerability Discovery Engine Siliang Qin Guannan Wang Zhanpeng Liu Jiashuo Liang Guancheng Li Haowei Yan <a href="https://in.linkedin.com/in/thesecguy">Owais Lone</a> <a href="https://www.linkedin.com/in/nagilson/">Noah Gilson</a> with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows AppX Deployment Service Information Disclosure Vulnerability <p>Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows AppX Deployment Service Microsoft Yes CVE-2026-69969 Improper Link Resolution Before File Access ('Link Following') 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Kernel Streaming Service Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Streaming Service Microsoft Yes CVE-2026-69970 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel-Mode Drivers Information Disclosure Vulnerability <p>Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2026-69971 Incorrect Authorization 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows libarchive Tampering Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.</p> <p><strong>What could an attacker achieve by exploiting this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability to make unauthorized modifications to protected system data. This could allow the attacker to alter system state or configuration beyond their normal privileges.</p> Windows Libarchive Microsoft Yes CVE-2026-69973 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Tampering 21945 Tampering 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz <a href="https://github.com/memoriaru">Memoriaru</a> <a href="https://github.com/memoriaru">Memoriaru</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Desktop Window Manager Information Disclosure Vulnerability <p>Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Desktop Window Manager Microsoft Yes CVE-2026-69974 Out-of-bounds Read 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 Information Disclosure 21945 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 20437 20438 12389 12390 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Varun Goel 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-69976 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability <p>Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Quality Windows Audio/Video Experience (QWAVE) service Microsoft Yes CVE-2026-69977 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/divyasundar16/">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows VMSwitch Denial of Service Vulnerability <p>Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.</p> Windows VMSwitch Microsoft Yes CVE-2026-69978 NULL Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 21945 Denial of Service 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 MORSE with <a href="https://www.microsoft.com/">Microsoft</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows AppX Deployment Service Security Feature Bypass Vulnerability <p>Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p> Windows AppX Deployment Service Microsoft Yes CVE-2026-69979 Improper Protection of Alternate Path 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 21945 Security Feature Bypass 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability <p>Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>A high attack complexity means that successful exploitation is complex and time‑consuming, requiring significant effort and precise conditions for an attacker to reliably exploit the vulnerability.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-69982 Weak Authentication 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 10852 10853 11568 11569 Security Feature Bypass 10483 Security Feature Bypass 10543 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 12436 Security Feature Bypass 12437 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 11568 Security Feature Bypass 11569 Important 10483 Important 10543 Important 10816 Important 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Important 10852 Important 10853 Important 11568 Important 11569 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 10852 10853 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-69984 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows libarchive Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Windows Libarchive Microsoft Yes CVE-2026-69985 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Juan Pablo Lopez Yacubian 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-69986 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-69987 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-69988 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-69991 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Services Remote Code Execution Vulnerability <p>Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Remote Desktop Services Microsoft Yes CVE-2026-69992 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-69994 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-69995 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Remote Desktop Client Microsoft Yes CVE-2026-69996 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-69997 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-69998 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Update Microsoft Yes CVE-2026-69999 Out-of-bounds Read 21945 21946 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-70004 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability <p>Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>A high attack complexity means that successful exploitation is complex and time‑consuming, requiring significant effort and precise conditions for an attacker to reliably exploit the vulnerability.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-70005 Weak Authentication 11571 11572 11923 11924 12436 12437 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 12436 Security Feature Bypass 12437 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-70006 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Framework Remote Code Execution Vulnerability <p>Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> .NET Framework Microsoft Yes CVE-2026-70007 Out-of-bounds Write 2472-10378 2472-10483 12414 12434 20837 21956 12079-21983 12079-21984 12079-21985 12079-21986 12078-21987 12079-21988 12079-21989 11650-10816 11650-10378 11650-10483 11676-11571 11676-11923 11863-10378 11863-10483 16767 21783 11723-10816 12079-11923 12079-12436 2472-21987 11723-22028 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11650-22028 Remote Code Execution 2472-10378 Remote Code Execution 2472-10483 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 20837 Remote Code Execution 21956 Remote Code Execution 12079-21983 Remote Code Execution 12079-21984 Remote Code Execution 12079-21985 Remote Code Execution 12079-21986 Remote Code Execution 12078-21987 Remote Code Execution 12079-21988 Remote Code Execution 12079-21989 Remote Code Execution 11650-10816 Remote Code Execution 11650-10378 Remote Code Execution 11650-10483 Remote Code Execution 11676-11571 Remote Code Execution 11676-11923 Remote Code Execution 11863-10378 Remote Code Execution 11863-10483 Remote Code Execution 16767 Remote Code Execution 21783 Remote Code Execution 11723-10816 Remote Code Execution 12079-11923 Remote Code Execution 12079-12436 Remote Code Execution 2472-21987 Remote Code Execution 11723-22028 Remote Code Execution 11723-11571 Remote Code Execution 11677-22029 Remote Code Execution 11676-22029 Remote Code Execution 11676-21983 Remote Code Execution 11676-21984 Remote Code Execution 11650-22028 Important 2472-10378 Important 2472-10483 Important 12414 Important 12434 Important 20837 Important 21956 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12078-21987 Important 12079-21988 Important 12079-21989 Important 11650-10816 Important 11650-10378 Important 11650-10483 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 16767 Important 21783 Important 11723-10816 Important 12079-11923 Important 12079-12436 Important 2472-21987 Important 11723-22028 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11650-22028 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21985 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21986 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21988 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21989 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-22028 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 5130036 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-10816 11650-22028 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-10816 11650-22028 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-11571 11676-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-11571 11676-22029 5127685 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/450 21783 Release Notes 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-10816 11723-22028 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-10816 11723-22028 5126868 5126868 https://support.microsoft.com/help/5126868 11723-10816 11723-22028 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 phrolo7a <a href="https://www.linkedin.com/in/alexthannah/">Alex Hannah</a> <a href="https://www.linkedin.com/in/alexthannah/">Alex Hannah</a> <a href="https://m0ssser-portfolio.pages.dev/">m0ssser</a> SOMESH SONUNE <a href="https://www.linkedin.com/in/mateusz-mto-gierblinski/">Mateusz Gierblinski</a> with <a href="https://curios-it.eu/">Curios</a> <a href="https://x.com/m4x_1997">Aobo Wang</a> <a href="https://www.linkedin.com/in/abdul-rehman---/">Muhammad Abdul Rehman</a> <a href="https://www.linkedin.com/in/mscyber/">Matheus Siqueira</a> thegoldmandm Anonymous <a href="https://x.com/ky0tofu">Ky0toFu</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.2 2026-10-27T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows IP Over USB Service Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows IP Over USB Service Microsoft Yes CVE-2026-70008 Integer Overflow or Wraparound 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-70010 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 Microsoft Red Team (MRT) with Microsoft Linzishan Linzishan 13ye01h4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows IP Over USB Service Information Disclosure Vulnerability <p>Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Windows IP Over USB Service Microsoft Yes CVE-2026-70011 Out-of-bounds Read 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-70012 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows iSCSI Remote Code Execution Vulnerability <p>Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints.</p> Windows iSCSI Microsoft Yes CVE-2026-70013 Use After Free 12389 12242 11930 12243 12390 20438 21946 12436 12437 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11931 12099 12097 11923 11924 21945 20437 12098 20854 Remote Code Execution 12389 Remote Code Execution 12242 Remote Code Execution 11930 Remote Code Execution 12243 Remote Code Execution 12390 Remote Code Execution 20438 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 21945 Remote Code Execution 20437 Remote Code Execution 12098 Remote Code Execution 20854 Important 12389 Important 12242 Important 11930 Important 12243 Important 12390 Important 20438 Important 21946 Important 12436 Important 12437 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11931 Important 12099 Important 12097 Important 11923 Important 11924 Important 21945 Important 20437 Important 12098 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20438 21946 21945 20437 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11930 11929 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11930 11929 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11930 11929 11931 12099 12097 12098 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 Linzishan & Anemone & Zhiniang Peng 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Cryptographic Services Remote Code Execution Vulnerability <p>Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Cryptographic Services Microsoft Yes CVE-2026-70014 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability <p>Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Local Security Authority Subsystem Service (LSASS) Microsoft Yes CVE-2026-70015 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Secure Kernel Mode Information Disclosure Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized heap memory.</p> Windows Secure Kernel Mode Microsoft Yes CVE-2026-70017 Access of Resource Using Incompatible Type ('Type Confusion') 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Microsoft Offensive Research &amp; Security Engineering 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Direct Composition Elevation of Privilege Vulnerability <p>Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Direct Composition Microsoft Yes CVE-2026-70021 Use After Free 11923 11924 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Elevation of Privilege Vulnerability <p>Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Hyper-V Microsoft Yes CVE-2026-70023 Use After Free 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://x.com/master_woogway">MasterOogway</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Internet Information Services Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Internet Information Services Microsoft Yes CVE-2026-70024 Stack-based Buffer Overflow Improper Input Validation 12436 12437 20854 20853 11929 12099 10378 10379 10483 10543 10853 10816 10855 11568 11569 11571 11572 11930 11931 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 10852 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Remote Code Execution 11929 Remote Code Execution 12099 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 10852 Important 12436 Important 12437 Important 20854 Important 20853 Important 11929 Important 12099 Important 10378 Important 10379 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11930 Important 11931 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 10852 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 12099 11930 11931 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Netlogon Denial of Service Vulnerability <p>Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.</p> Windows Netlogon Microsoft Yes CVE-2026-70025 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 21945 Denial of Service 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Secure Kernel Mode Elevation of Privilege Vulnerability <p>Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Secure Kernel Mode Microsoft Yes CVE-2026-70026 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Microsoft Offensive Research &amp; Security Engineering 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Subsystem for Linux Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Subsystem for Linux Microsoft Yes CVE-2026-70027 Heap-based Buffer Overflow 21945 21946 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 nhandang@microsoft.com 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows iSCSI Denial of Service Vulnerability <p>Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.</p> Windows iSCSI Microsoft Yes CVE-2026-70031 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11931 12099 12097 11923 11924 12243 12390 20438 21946 12436 12437 20853 11930 21945 12242 20854 12098 12389 20437 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11929 Denial of Service 11931 Denial of Service 12099 Denial of Service 12097 Denial of Service 11923 Denial of Service 11924 Denial of Service 12243 Denial of Service 12390 Denial of Service 20438 Denial of Service 21946 Denial of Service 12436 Denial of Service 12437 Denial of Service 20853 Denial of Service 11930 Denial of Service 21945 Denial of Service 12242 Denial of Service 20854 Denial of Service 12098 Denial of Service 12389 Denial of Service 20437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11931 Important 12099 Important 12097 Important 11923 Important 11924 Important 12243 Important 12390 Important 20438 Important 21946 Important 12436 Important 12437 Important 20853 Important 11930 Important 21945 Important 12242 Important 20854 Important 12098 Important 12389 Important 20437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11931 12099 12097 11930 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 20438 21946 21945 12389 20437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Linzishan & Anemone & Zhiniang Peng 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability <p>Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.</p> Remote Desktop Gateway Service Microsoft Yes CVE-2026-70033 Missing Release of Memory after Effective Lifetime 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Framework Remote Code Execution Vulnerability <p>Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> .NET Framework Microsoft Yes CVE-2026-70035 Deserialization of Untrusted Data 21956 16767 21783 20837 12414 12434 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 Remote Code Execution 21956 Remote Code Execution 16767 Remote Code Execution 21783 Remote Code Execution 20837 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 12079-21983 Remote Code Execution 12079-21984 Remote Code Execution 12079-21985 Remote Code Execution 12079-21986 Remote Code Execution 12079-12436 Remote Code Execution 12078-21987 Remote Code Execution 12079-21988 Remote Code Execution 12079-11923 Remote Code Execution 12079-21989 Remote Code Execution 2472-21987 Remote Code Execution 2472-10378 Remote Code Execution 2472-10483 Remote Code Execution 11723-22028 Remote Code Execution 11723-10816 Remote Code Execution 11723-11571 Remote Code Execution 11677-22029 Remote Code Execution 11676-22029 Remote Code Execution 11676-21983 Remote Code Execution 11676-21984 Remote Code Execution 11676-11571 Remote Code Execution 11676-11923 Remote Code Execution 11863-10378 Remote Code Execution 11863-10483 Remote Code Execution 11650-22028 Remote Code Execution 11650-10378 Remote Code Execution 11650-10483 Remote Code Execution 11650-10816 Important 21956 Important 16767 Important 21783 Important 20837 Important 12414 Important 12434 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21985 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21986 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21988 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21989 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/451 21783 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 <a href="https://vincent55.tw/">Vincent55 Yang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows iSCSI Remote Code Execution Vulnerability <p>Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows iSCSI Microsoft Yes CVE-2026-70038 Use After Free Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Zhiniang Peng with HUST yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows CD-ROM Driver Information Disclosure Vulnerability <p>Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is a small amount of kernel memory which could be leaked back to the attacker.</p> Windows CD-ROM Driver Microsoft Yes CVE-2026-70041 Buffer Over-read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Linzishan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-70044 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11931 11930 12099 12097 12098 11923 11924 12389 12390 20437 20438 21945 21946 12436 12243 12242 12437 20853 20854 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11931 Information Disclosure 11930 Information Disclosure 12099 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12243 Information Disclosure 12242 Information Disclosure 12437 Information Disclosure 20853 Information Disclosure 20854 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11931 Important 11930 Important 12099 Important 12097 Important 12098 Important 11923 Important 11924 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12243 Important 12242 Important 12437 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11931 11930 12099 12097 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Work Folders Elevation of Privilege Vulnerability <p>Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Work Folders Microsoft Yes CVE-2026-70045 Use After Free 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 haowei yan Linzishan, Anemone and Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-70048 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Configuration Manager Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Exploiting this vulnerability would require an attacker to satisfy the prerequisite of internal network foothold and relaying the Management Point machine identity which is chain-dependent, is not produced by this bug itself and is not normally exposed directly to the Internet.</p> <p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires that an attacker will need to first gain access to the restricted network before running an attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker with access to the restricted network and the ability to authenticate as a Configuration Manager management point could submit specially crafted data to an affected system. Successful exploitation could allow the attacker to gain administrative control of the Configuration Manager environment. User interaction is not required.</p> Microsoft Configuration Manager Microsoft Yes CVE-2026-70049 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 16788 21565 21566 Elevation of Privilege 16788 Elevation of Privilege 21565 Elevation of Privilege 21566 Important 16788 Important 21565 Important 21566 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 16788 8.0 7.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 21565 8.0 7.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C 21566 Release Notes 38982839, 38232642 16788 No Security Update 5.00.9135.1042 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/2603/39398030 16788 Release Notes Release Notes 38982839, 38232642 21565 No Security Update 5.00.9141.1041 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/2603/39398030 21565 Release Notes Release Notes 38982839, 38232642 21566 No Security Update 5.00.9146.1027 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/2603/39398030 21566 Release Notes <a href="https://x.com/unsigned_sh0rt">Garrett Foster</a> with SpecterOps 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-13T07:00:00 <p>Updated the vulnerability title and description to correctly identify Microsoft Configuration Manager as the affected product. Added an FAQ explaining the exploitation requirements. This is an informational change only; the affected products, security updates, severity, and CVSS scores are unchanged.</p> Windows SmartScreen Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> Windows SmartScreen Microsoft Yes CVE-2026-70051 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PowerShell Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.</p> Windows PowerShell Microsoft Yes CVE-2026-70052 Integer Overflow or Wraparound Heap-based Buffer Overflow 21945 21946 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg &amp; 2st</a> with https://diffract-ai.com/ Linzishan, Anemone and Zhiniang Peng 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-11-02T08:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows NetBIOS Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NetBIOS Microsoft Yes CVE-2026-70054 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://x.com/master_woogway">MasterWoogway</a> Jianliang Zhao &amp; Zhiniang Peng with HUST, R4nger &amp; mj with Kunlun Lab <a href="https://x.com/z0v3r1n">zoverin</a> Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> lobeliaerinus_columbine(DYZ) with https://x.com/myric0ides <a href="https://hazy0189.github.io/">hazy</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Cryptographic Services Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Cryptographic Services Microsoft Yes CVE-2026-70055 Exposure of Sensitive System Information to an Unauthorized Control Sphere 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Microsoft Offensive Research &amp; Security Engineering 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Service Elevation of Privilege Vulnerability <p>Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Update Service Microsoft Yes CVE-2026-70056 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Zhang WangJunJie@Hillstone, He YiSheng <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 0ccbbf129444eb66344ccafb92b00df4 Linzishan, Anemone and Zhiniang Peng with HUST 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability <p>Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass IPsec execution policy enforcement, allowing them to circumvent the rules and restrictions that govern how IPsec is applied. This could enable unauthorized or untrusted network communications to proceed without the intended security protections being enforced.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-70057 Incorrect Authorization 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Security Feature Bypass 21945 Security Feature Bypass 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> Windows DHCP Server Microsoft Yes CVE-2026-70058 Out-of-bounds Write 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows OLE Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows OLE Microsoft Yes CVE-2026-70059 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70060 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Owen McCullough with MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows libarchive Remote Code Execution Vulnerability <p>Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Libarchive Microsoft Yes CVE-2026-70062 Double Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Kernel Microsoft Yes CVE-2026-70063 Out-of-bounds Read 21946 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21946 Information Disclosure 21945 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 21945 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 sweetchip Daejin Lee 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kerberos Elevation of Privilege Vulnerability <p>Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kerberos Microsoft Yes CVE-2026-70064 Integer Underflow (Wrap or Wraparound) 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Elevation of Privilege Vulnerability <p>Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DHCP Server Microsoft Yes CVE-2026-70066 Use After Free 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70067 Use After Free 11568 11569 11571 11572 11923 11924 11930 11931 12097 12098 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11930 Important 11931 Important 12097 Important 12098 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5122876 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876 5120238 11568 11569 11571 11572 Yes Security Update 10.0.17763.9245 https://support.microsoft.com/help/5122876 11568 11569 11571 11572 5122876 5122882 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122882 5120242 11923 11924 Yes Security Update 10.0.20348.5622 https://support.microsoft.com/help/5122882 11923 11924 5122882 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 11930 11931 Yes Security Update 10.0.19044.7725 https://support.microsoft.com/help/5122878 11930 11931 5122878 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 12097 12098 Yes Security Update 10.0.19045.7725 https://support.microsoft.com/help/5122878 12097 12098 5122878 5122871 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122871 5120233 12437 12436 Yes Security Update 10.0.26100.33438 https://support.microsoft.com/help/5122871 12437 12436 5122871 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 20437 20438 Yes Security Update 10.0.26200.9445 https://support.microsoft.com/help/5124008 20437 20438 5124008 5122880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122880 5120240 12242 12243 Yes Security Update 10.0.22631.7582 https://support.microsoft.com/help/5122880 12242 12243 5122880 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 12389 12390 Yes Security Update 10.0.26100.9445 https://support.microsoft.com/help/5124008 12389 12390 5124008 5124012 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124012 5121000 20853 20854 Yes Security Update 10.0.28000.2954 https://support.microsoft.com/help/5124012 20853 20854 5124012 5123099 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123099 5120418 10852 10853 10816 10855 Yes Security Update 10.0.14393.9512 https://support.microsoft.com/help/5123099 10852 10853 10816 10855 5123099 5123065 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123065 5120386 10378 10379 Yes Security Update 6.2.9200.26349 https://support.microsoft.com/help/5123065 10378 10379 5123065 5123066 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123066 5120385 10483 10543 Yes Security Update 6.3.9600.23398 https://support.microsoft.com/help/5123066 10483 10543 5123066 Owen McCullough with MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Windows Client-Side Caching (CSC) Service Microsoft Yes CVE-2026-70068 Heap-based Buffer Overflow Untrusted Pointer Dereference 12389 12390 20437 20438 21945 21946 12436 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11931 11930 12099 12097 12098 11923 11924 12243 12242 12437 20853 20854 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11931 Elevation of Privilege 11930 Elevation of Privilege 12099 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 12242 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11931 Important 11930 Important 12099 Important 12097 Important 12098 Important 11923 Important 11924 Important 12243 Important 12242 Important 12437 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11931 11930 12099 12097 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 yhw Do Young Park (adawn) <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-27T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low-level access to an affected server could send a specially crafted request to execute code on the server. User interaction is not required.</p> Windows DHCP Server Microsoft Yes CVE-2026-70069 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Linzishan, Anemone and Zhiniang Peng with HUST Rutuja Shirali 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Tampering Vulnerability <p>Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally.</p> Role: DNS Server Microsoft Yes CVE-2026-70071 Improper Verification of Cryptographic Signature 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 12437 Tampering 12436 Tampering 10852 Tampering 10853 Tampering 10816 Tampering 10855 Tampering 10378 Tampering 10379 Tampering 10483 Tampering 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Netlogon Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.</p> Windows Netlogon Microsoft Yes CVE-2026-70072 Allocation of Resources Without Limits or Throttling 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 21945 Denial of Service 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DNS Information Disclosure Vulnerability <p>Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows DNS Microsoft Yes CVE-2026-70074 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/dark_puzzle">Souhail Hammou</a> 1.1 2026-10-20T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>A successful attacker could bypass the Windows Key Storage Provider which issues key certificates for trust in attestation scenarios.</p> Windows Virtualization-Based Security (VBS) Enclave Microsoft Yes CVE-2026-70075 Time-of-check Time-of-use (TOCTOU) Race Condition 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 21945 Security Feature Bypass 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Microsoft Offensive Research &amp; Security Engineering 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70076 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Owen McCullough with MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Kernel Microsoft Yes CVE-2026-70077 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Owen McCullough with MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DNS Denial of Service Vulnerability <p>Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network.</p> Windows DNS Microsoft Yes CVE-2026-70079 Improper Enforcement of Behavioral Workflow 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DNS Denial of Service Vulnerability <p>Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network.</p> Windows DNS Microsoft Yes CVE-2026-70082 Uncaught Exception 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Tampering Vulnerability <p>Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally.</p> Role: DNS Server Microsoft Yes CVE-2026-70083 Incorrect Authorization 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 12437 Tampering 12436 Tampering 10852 Tampering 10853 Tampering 10816 Tampering 10855 Tampering 10378 Tampering 10379 Tampering 10483 Tampering 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Projected File System Information Disclosure Vulnerability <p>Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p> Windows Projected File System Microsoft Yes CVE-2026-70084 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Tampering Vulnerability <p>Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.</p> Role: DNS Server Microsoft Yes CVE-2026-70085 Missing Authorization 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 12437 Tampering 12436 Tampering 10816 Tampering 10855 Tampering 10378 Tampering 10379 Tampering 10483 Tampering 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-70086 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 GraVity0 OOOooooooOOO 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Security Feature Bypass Vulnerability <p>Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could execute RPC procedures that are restricted to privileged accounts, bypassing the access check for the RPC procedures.</p> Role: DNS Server Microsoft Yes CVE-2026-70087 Incorrect Authorization 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 12437 Security Feature Bypass 12436 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows GDI Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.</p> Windows GDI Microsoft Yes CVE-2026-70089 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Netlogon Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows Netlogon Microsoft Yes CVE-2026-70090 Use of Uninitialized Resource 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft PostScript Printer Driver Microsoft Yes CVE-2026-70092 Heap-based Buffer Overflow 12389 12390 20437 20438 21945 21946 12436 12437 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 20854 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Rich Text Edit Control Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Rich Text Edit Control Microsoft Yes CVE-2026-70093 Heap-based Buffer Overflow 21946 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 21945 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows iSCSI Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>A high attack complexity means that successful exploitation is complex and time‑consuming, requiring significant effort and precise conditions for an attacker to reliably exploit the vulnerability.</p> Windows iSCSI Microsoft Yes CVE-2026-70095 Heap-based Buffer Overflow 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 20437 20438 12389 12390 21945 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Linzishan & Anemone & Zhiniang Peng Pwnforr777 1.1 2026-10-14T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Rich Text Edit Control Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Rich Text Edit Control Microsoft Yes CVE-2026-70096 Heap-based Buffer Overflow 21945 21946 11762 11763 11953 11952 12420 12421 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 11951 12440 21368 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11953 Remote Code Execution 11952 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Important 21945 Important 21946 Important 11762 Important 11763 Important 11953 Important 11952 Important 12420 Important 12421 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11953 11952 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11953 11952 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes pwn2addr 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Virtualization-Based Security (VBS) Enclave Microsoft Yes CVE-2026-70097 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 21945 21946 11923 11924 12437 20437 20438 12389 12390 12436 20853 20854 Spoofing 21945 Spoofing 21946 Spoofing 11923 Spoofing 11924 Spoofing 12437 Spoofing 20437 Spoofing 20438 Spoofing 12389 Spoofing 12390 Spoofing 12436 Spoofing 20853 Spoofing 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Microsoft Offensive Research &amp; Security Engineering 1.0 2026-10-13T07:00:00 <p>Information published.</p> Visual Studio Code Remote Code Execution Vulnerability <p>Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could convince a user to open a specially crafted Visual Studio Code workspace. Successful exploitation could bypass Workspace Trust protections and allow attacker-controlled content to execute code in the context of the user. User interaction is required, but the user does not need to grant trust.</p> Visual Studio Code Microsoft Yes CVE-2026-70098 Missing Authorization 11622 Remote Code Execution 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Security Update 1.141.1 https://code.visualstudio.com/updates/v1_141 11622 Release Notes <a href="https://www.linkedin.com/in/mohamedabosakr">Mo Sakr</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Spaceport.sys Elevation of Privilege Vulnerability <p>Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Spaceport.sys Microsoft Yes CVE-2026-70102 Use After Free 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Error Reporting Microsoft Yes CVE-2026-70103 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> haowei yan &amp; xiaozun tang Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70104 Untrusted Pointer Dereference 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-70106 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 21368 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Remote Code Execution 21368 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 Release Notes ELDEN pwn2addr n0x Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. pwn2addr Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70108 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft PostScript Printer Driver Microsoft Yes CVE-2026-70109 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12389 12390 20437 20438 21945 21946 12436 12437 12098 12097 11923 11924 12242 12243 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PostScript Printer Driver Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft PostScript Printer Driver Microsoft Yes CVE-2026-70110 Stack-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 12389 12390 20437 20438 21945 21946 12436 12437 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> Windows Kernel Microsoft Yes CVE-2026-70111 Untrusted Pointer Dereference 10852 10378 10379 10483 10543 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10852 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10852 Important 10378 Important 10379 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://travisgreen.net/">Travis Green</a> with <a href="https://corelight.com/blog">Corelight</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Spaceport.sys Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.</p> Windows Spaceport.sys Microsoft Yes CVE-2026-70112 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg &amp; 2st</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Client for NFS Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Client for NFS Microsoft Yes CVE-2026-70113 Integer Overflow or Wraparound 11929 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-70114 Heap-based Buffer Overflow 21945 21946 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-70115 Use After Free 21945 21946 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability <p>Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>A high attack complexity means that successful exploitation is complex and time‑consuming, requiring significant effort and precise conditions for an attacker to reliably exploit the vulnerability.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-70116 Stack-based Buffer Overflow 12389 12390 20438 21945 21946 12436 12437 20854 20853 20437 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 20438 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 12436 Security Feature Bypass 12437 Security Feature Bypass 20854 Security Feature Bypass 20853 Security Feature Bypass 20437 Important 12389 Important 12390 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 20437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.2 3.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 4.2 3.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 4.2 3.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 4.2 3.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 4.2 3.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 4.2 3.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 4.2 3.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 4.2 3.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 4.2 3.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 4.2 3.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20438 21945 21946 20437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://github.com/0x00000ff">Kangjun Heo</a> with <a href="https://plus.cnu.ac.kr/">Chungnam National University</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70117 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Audio Service Elevation of Privilege Vulnerability <p>Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Audio Service Microsoft Yes CVE-2026-70118 Use After Free 21945 21946 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DNS Remote Code Execution Vulnerability <p>Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network.</p> Windows DNS Microsoft Yes CVE-2026-70119 Out-of-bounds Read 11923 11924 12437 12436 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Important 11923 Important 11924 Important 12437 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 Jonghoi Kim bccc95a61a3cc79d7b2c4423c808f744 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-70121 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/ultimat3hg">uhg</a> <a href="https://x.com/malware_owl">Tay Kiat Loong</a> byzero, mj with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://x.com/sangjun_pwn">Sangjun Park</a> with <a href="https://www.enki.co.kr/">ENKI Whitehat</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained (&quot;sandboxed&quot;) execution environment to a Medium Integrity Level. Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-70122 Time-of-check Time-of-use (TOCTOU) Race Condition 21945 21946 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Graphics Component Elevation of Privilege Vulnerability <p>Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Graphics Component Microsoft Yes CVE-2026-70123 Numeric Truncation Error Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Bluetooth Port Driver Remote Code Execution <p>Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>A high attack complexity means that successful exploitation is complex and time‑consuming, requiring significant effort and precise conditions for an attacker to reliably exploit the vulnerability.</p> Windows Bluetooth Port Driver Microsoft Yes CVE-2026-70126 Out-of-bounds Read Improper Input Validation 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">Jmini</a> Anonymous at Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Domain Name Service Remote Code Execution Vulnerability <p>Use after free in DNS Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Role: DNS Server Microsoft Yes CVE-2026-70127 Use After Free 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/dark_puzzle">Souhail Hammou</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> HID Parser Library Information Disclosure Vulnerability <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p> HID Parser Library Microsoft Yes CVE-2026-70128 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-70131 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://twitter.com/anand_himanshu">Himanshu Anand</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Portable Device File System Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Portable Device File System Driver Microsoft Yes CVE-2026-70132 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://twitter.com/4zure9">Azure Yang</a> with <a href="http://www.cyberkl.com/">Kunlun Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows SMB Server Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.</p> Windows SMB Server Microsoft Yes CVE-2026-70133 Allocation of Resources Without Limits or Throttling 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 21945 Denial of Service 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Soon Oh with microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Event Tracing Elevation of Privilege Vulnerability <p>Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Event Tracing Microsoft Yes CVE-2026-70134 Use After Free 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous <a href="https://www.linkedin.com/in/bruno-milreu/">Bruno Milreu Filipe</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Remote POS Driver Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Remote POS Driver Microsoft Yes CVE-2026-70135 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-70136 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Remote Access Connection Manager Information Disclosure Vulnerability <p>Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Windows Remote Access Connection Manager Microsoft Yes CVE-2026-70137 Missing Authentication for Critical Function 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows OLE Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from Medium Integrity Level to Local Service.</p> Windows OLE Microsoft Yes CVE-2026-70138 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 haowei yan &amp; xiaozun tang <a href="https://www.linkedin.com/in/divyasundar16">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Update Service Microsoft Yes CVE-2026-70139 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Audio Service Elevation of Privilege Vulnerability <p>Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Audio Service Microsoft Yes CVE-2026-70140 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-70141 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Service Elevation of Privilege Vulnerability <p>Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Update Service Microsoft Yes CVE-2026-70142 Untrusted Search Path 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Network File System Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.</p> Windows Network File System Microsoft Yes CVE-2026-70143 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70144 Use After Free 21945 21946 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> Jmini <a href="https://twitter.com/kkokkokye">JeongOh Kyea</a> with <a href="https://theori.io/">Theori, with Xint</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PostScript Printer Driver Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.</p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted print job to an affected print service over the network. Successful exploitation could allow the attacker to execute code on the target system. User interaction is not required.</p> Microsoft PostScript Printer Driver Microsoft Yes CVE-2026-70147 Heap-based Buffer Overflow 12389 12390 20437 20438 21945 21946 12436 12437 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 20854 20853 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 20854 Remote Code Execution 20853 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> TunSk &amp; Zhiniang Peng xina1i@psbc Pwnforr777 TunSk &amp; Zhiniang Peng 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Information Disclosure Vulnerability <p>Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could access Broadcast DVR capture metadata belonging to another process in the same user session.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-70148 Unintended Proxy or Intermediary ('Confused Deputy') 11568 11569 11571 11572 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Client Side Caching driver (csc.sys) Elevation of Privilege Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Windows Client Side Caching driver (csc.sys) Microsoft Yes CVE-2026-70149 Heap-based Buffer Overflow Integer Overflow or Wraparound 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12389 12390 20437 20438 21945 21946 12436 12437 12242 12243 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 12242 Important 12243 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://github.com/cbwang505">ChengBin Wang</a> with <a href="https://www.guolisec.com/">ZheJiang Guoli Security Technology</a> Jonghoi Kim 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-70150 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Direct Composition Elevation of Privilege Vulnerability <p>Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Direct Composition Microsoft Yes CVE-2026-70151 Use After Free 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 21945 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PostScript Printer Driver Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Microsoft PostScript Printer Driver Microsoft Yes CVE-2026-70153 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DNS Denial of Service Vulnerability <p>Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network.</p> Windows DNS Microsoft Yes CVE-2026-70155 Missing Release of Memory after Effective Lifetime 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-70156 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows System Information Console Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows System Information Console Microsoft Yes CVE-2026-70157 Heap-based Buffer Overflow 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 Remote Code Execution 21945 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 20437 20438 12389 12390 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Jean-Jamil Khalife with <a href="https://www.hdwsec.fr/">HDWSec</a> Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability <p>Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-70158 Double Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> ASP.NET Core Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> ASP.NET Core Microsoft Yes CVE-2026-70159 Allocation of Resources Without Limits or Throttling 21958-20837 21958-20839 21958-20838 21959-20837 21959-20839 21959-20838 21958-21783 21958-21785 21958-21784 21959-21783 21959-21785 21959-21784 21958-12414 21958-12415 21958-12416 21959-12414 21959-12415 21959-12416 21958-12434 21958-12432 21958-12433 21959-12434 21959-12432 21959-12433 21956 16767 Denial of Service 21958-20837 Denial of Service 21958-20839 Denial of Service 21958-20838 Denial of Service 21959-20837 Denial of Service 21959-20839 Denial of Service 21959-20838 Denial of Service 21958-21783 Denial of Service 21958-21785 Denial of Service 21958-21784 Denial of Service 21959-21783 Denial of Service 21959-21785 Denial of Service 21959-21784 Denial of Service 21958-12414 Denial of Service 21958-12415 Denial of Service 21958-12416 Denial of Service 21959-12414 Denial of Service 21959-12415 Denial of Service 21959-12416 Denial of Service 21958-12434 Denial of Service 21958-12432 Denial of Service 21958-12433 Denial of Service 21959-12434 Denial of Service 21959-12432 Denial of Service 21959-12433 Denial of Service 21956 Denial of Service 16767 Important 21958-20837 Important 21958-20839 Important 21958-20838 Important 21959-20837 Important 21959-20839 Important 21959-20838 Important 21958-21783 Important 21958-21785 Important 21958-21784 Important 21959-21783 Important 21959-21785 Important 21959-21784 Important 21958-12414 Important 21958-12415 Important 21958-12416 Important 21959-12414 Important 21959-12415 Important 21959-12416 Important 21958-12434 Important 21958-12432 Important 21958-12433 Important 21959-12434 Important 21959-12432 Important 21959-12433 Important 21956 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21958-20837 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21958-20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21958-20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21959-20837 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21959-20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21959-20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21958-21783 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21958-21785 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21958-21784 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21959-21783 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21959-21785 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21959-21784 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21958-12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21958-12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21958-12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21959-12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21959-12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21959-12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21958-12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21958-12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21958-12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21959-12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21959-12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21959-12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21956 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common 21958-20837 21958-20839 21958-20838 Security Update 10.0.13 https://github.com/dotnet/announcements/issues/452 21958-20837 21958-20839 21958-20838 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Core 21959-20837 21959-20839 21959-20838 21959-21783 21959-21785 21959-21784 21959-12414 21959-12415 21959-12416 21959-12434 21959-12432 21959-12433 Security Update 1.2.14 https://github.com/dotnet/announcements/issues/452 21959-20837 21959-20839 21959-20838 21959-21783 21959-21785 21959-21784 21959-12414 21959-12415 21959-12416 21959-12434 21959-12432 21959-12433 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common 21958-21783 21958-21785 21958-21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/452 21958-21783 21958-21785 21958-21784 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common 21958-12414 21958-12415 21958-12416 Security Update 8.0.32 https://github.com/dotnet/announcements/issues/452 21958-12414 21958-12415 21958-12416 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Common 21958-12434 21958-12432 21958-12433 Security Update 9.0.21 https://github.com/dotnet/announcements/issues/452 21958-12434 21958-12432 21958-12433 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes <a href="https://vincent55.tw/">Vincent55 Yang</a> nono 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kernel Microsoft Yes CVE-2026-70160 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Elevation of Privilege Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain the privileges of the user account or service account running the affected process.</p> .NET Microsoft Yes CVE-2026-70161 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21783 12434 20837 21956 16767 Elevation of Privilege 21783 Elevation of Privilege 12434 Elevation of Privilege 20837 Elevation of Privilege 21956 Elevation of Privilege 16767 Important 21783 Important 12434 Important 20837 Important 21956 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.100-rc.2 https://github.com/dotnet/announcements/issues/453 21783 Release Notes 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Yes Security Update 9.0.319, 9.0.122 https://support.microsoft.com/help/5130035 12434 5130035 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.402 https://support.microsoft.com/help/5130036 20837 5130036 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes <a href="https://x.com/m4x_1997">Aobo Wang</a> <a href="https://www.linkedin.com/in/nguyen-hoang-quoc-an-009863267/">kayiz</a> with <a href="http://lp.com.vn/">Lien Phat Technology Corporation</a> <a href="https://www.linkedin.com/in/đức-nguyễn-văn-minh-19a925287/">Nguyen Van Minh Duc</a> with <a href="https://saigonnewport.com.vn/">Saigon Newport Corporation</a> <a href="https://www.linkedin.com/in/nguyen-hoang-quoc-an-009863267/">Nguyen Hoang Quoc An</a> with <a href="https://lp.com.vn/">Lien Phat Technology Corporation</a> Coşkun Bağrıa&#231;ık <a href="https://x.com/omarkhalil1138">Omar Khaleel</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.2 2026-10-27T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> .NET Denial of Service Vulnerability <p>A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application.</p> <p>A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET application.</p> <p>The update addresses the vulnerability by correcting how the .NET web application handles web requests.</p> .NET Microsoft Yes CVE-2026-70162 Asymmetric Resource Consumption (Amplification) 21961-20837 21961-21783 21961-12414 21961-12434 21956 16767 Denial of Service 21961-20837 Denial of Service 21961-21783 Denial of Service 21961-12414 Denial of Service 21961-12434 Denial of Service 21956 Denial of Service 16767 Important 21961-20837 Important 21961-21783 Important 21961-12414 Important 21961-12434 Important 21956 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-20837 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-21783 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-12414 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-12434 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21956 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Pkcs 21961-20837 Security Update 10.0.13 https://github.com/dotnet/announcements/issues/454 21961-20837 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Pkcs 21961-21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/454 21961-21783 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Pkcs 21961-12414 Security Update 8.0.2 https://github.com/dotnet/announcements/issues/454 21961-12414 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Pkcs 21961-12434 Security Update 9.0.21 https://github.com/dotnet/announcements/issues/454 21961-12434 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes <a href="https://x.com/soaj1664ashar">Dr.-Ing Ashar Javed</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.</p> 1.2 2026-10-16T07:00:00 <p>Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft OpenSSH for Windows Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.</p> OpenSSH for Windows Microsoft Yes CVE-2026-70163 Allocation of Resources Without Limits or Throttling 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Denial of Service 21945 Denial of Service 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://twitter.com/anand_himanshu">Himanshu Anand</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows TCP/IP Elevation of Privilege Vulnerability <p>Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows TCP/IP Microsoft Yes CVE-2026-70164 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain the privileges of the user account or service account running the affected process.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition and also to take additional actions prior to exploitation to prepare the target environment.</p> .NET Microsoft Yes CVE-2026-70165 Improper Link Resolution Before File Access ('Link Following') 21956 16767 12434 20837 21783 Elevation of Privilege 21956 Elevation of Privilege 16767 Elevation of Privilege 12434 Elevation of Privilege 20837 Elevation of Privilege 21783 Important 21956 Important 16767 Important 12434 Important 20837 Important 21783 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Yes Security Update 9.0.319, 9.0.122 https://support.microsoft.com/help/5130035 12434 5130035 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.402 https://support.microsoft.com/help/5130036 20837 5130036 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.100-rc.2 https://github.com/dotnet/announcements/issues/455 21783 Release Notes thegoldmandm <a href="https://x.com/m4x_1997">Aobo Wang</a> <a href="https://x.com/omarkhalil1138">Omar Khaleel</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DNS Denial of Service Vulnerability <p>Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network.</p> Windows DNS Microsoft Yes CVE-2026-70166 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Domain Name Service Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.</p> Role: DNS Server Microsoft Yes CVE-2026-70167 Access of Resource Using Incompatible Type ('Type Confusion') Untrusted Pointer Dereference 11923 11924 12437 12436 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Important 11923 Important 11924 Important 12437 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-70168 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Owen McCullough with MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Connected Devices Platform Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Connected Devices Platform Service Microsoft Yes CVE-2026-70169 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Denial of Service Vulnerability <p>Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.</p> Windows Kernel Microsoft Yes CVE-2026-70170 Untrusted Pointer Dereference 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 21945 Denial of Service 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 yhw <a href="https://x.com/hototogisutian">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ <a href="https://x.com/hototogisutian">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ uky 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-70172 Untrusted Pointer Dereference 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-70173 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Remote Code Execution Vulnerability <p>Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> .NET Microsoft Yes CVE-2026-70174 Improperly Implemented Security Check for Standard 21956 21783 16767 20837 12414 12434 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 Remote Code Execution 21956 Remote Code Execution 21783 Remote Code Execution 16767 Remote Code Execution 20837 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 12079-21983 Remote Code Execution 12079-21984 Remote Code Execution 12079-21985 Remote Code Execution 12079-21986 Remote Code Execution 12079-12436 Remote Code Execution 12078-21987 Remote Code Execution 12079-21988 Remote Code Execution 12079-11923 Remote Code Execution 12079-21989 Remote Code Execution 2472-21987 Remote Code Execution 2472-10378 Remote Code Execution 2472-10483 Remote Code Execution 11723-22028 Remote Code Execution 11723-10816 Remote Code Execution 11723-11571 Remote Code Execution 11677-22029 Remote Code Execution 11676-22029 Remote Code Execution 11676-21983 Remote Code Execution 11676-21984 Remote Code Execution 11676-11571 Remote Code Execution 11676-11923 Remote Code Execution 11863-10378 Remote Code Execution 11863-10483 Remote Code Execution 11650-22028 Remote Code Execution 11650-10378 Remote Code Execution 11650-10483 Remote Code Execution 11650-10816 Important 21956 Important 21783 Important 16767 Important 20837 Important 12414 Important 12434 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21985 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21986 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21988 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21989 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/456 21783 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 <a href="https://x.com/ky0tofu">Ky0toFu</a> <a href="https://www.linkedin.com/in/nguyen-hoang-quoc-an-009863267/">kayiz</a> with <a href="http://lp.com.vn/">Lien Phat Technology Corporation</a> nono <a href="https://www.linkedin.com/in/leandrosbatista21/">Leandro Batista</a> <a href="https://www.linkedin.com/in/kevin-sch/">Kevin Schmidt</a> <a href="https://www.linkedin.com/in/rolf-z-67962959/">Rolf Zengafinnen</a> <a href="https://www.linkedin.com/in/nguyen-hoang-quoc-an-009863267/">kayiz</a> with <a href="http://lp.com.vn/">Lien Phat Technology Corporation</a> <a href="https://www.linkedin.com/in/abdul-rehman---/">Muhammad Abdul Rehman</a> <a href="https://x.com/m4x_1997">Aobo Wang</a> <a href="https://x.com/bbznop">bbznop</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> ASP.NET Core Elevation of Privilege Vulnerability <p>Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by submitting a password reset request using a specially crafted email address that is treated as equivalent to another account. Successful exploitation could allow the attacker to take over the targeted account. No user interaction is required.</p> ASP.NET Core Microsoft Yes CVE-2026-70175 Weak Password Recovery Mechanism for Forgotten Password 21956 16767 12256 12507 20932 Elevation of Privilege 21956 Elevation of Privilege 16767 Elevation of Privilege 12256 Elevation of Privilege 12507 Elevation of Privilege 20932 Important 21956 Important 16767 Important 12256 Important 12507 Important 20932 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12256 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12507 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20932 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12256 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12256 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12507 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12507 5130035 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20932 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20932 5130036 Attila.Cs(zerodaybugs.com) with https://zerodaybugs.com/ xNavSec Dohyeok Kim NavSec5 with NavSec Elemperor Anonymous xNavSec <a href="https://www.linkedin.com/in/jiheun-kim/">JiHeun Kim (@l8BL)</a> with <a href="https://enki.co.kr/">ENKI WhiteHat</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70176 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-70177 Numeric Truncation Error Improper Input Validation 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang Steven F with SpecterOps 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> ASP.NET Core Elevation of Privilege Vulnerability <p>Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> ASP.NET Core Microsoft Yes CVE-2026-70179 Authentication Bypass by Spoofing 21956 16767 21962-20837 21962-20839 21962-20838 21962-12414 21962-12415 21962-12416 21962-12434 21962-12432 21962-12433 Elevation of Privilege 21956 Elevation of Privilege 16767 Elevation of Privilege 21962-20837 Elevation of Privilege 21962-20839 Elevation of Privilege 21962-20838 Elevation of Privilege 21962-12414 Elevation of Privilege 21962-12415 Elevation of Privilege 21962-12416 Elevation of Privilege 21962-12434 Elevation of Privilege 21962-12432 Elevation of Privilege 21962-12433 Important 21956 Important 16767 Important 21962-20837 Important 21962-20839 Important 21962-20838 Important 21962-12414 Important 21962-12415 Important 21962-12416 Important 21962-12434 Important 21962-12432 Important 21962-12433 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21962-20837 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21962-20839 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21962-20838 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21962-12414 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21962-12415 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21962-12416 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21962-12434 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21962-12432 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21962-12433 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.Authentication.Negotiate 21962-20837 21962-20839 21962-20838 Security Update 10.0.13 https://github.com/dotnet/announcements/issues/458 21962-20837 21962-20839 21962-20838 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.Authentication.Negotiate 21962-12414 21962-12415 21962-12416 Security Update 8.0.32 https://github.com/dotnet/announcements/issues/458 21962-12414 21962-12415 21962-12416 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.Authentication.Negotiate 21962-12434 21962-12432 21962-12433 Security Update 9.0.21 https://github.com/dotnet/announcements/issues/458 21962-12434 21962-12432 21962-12433 Release Notes thegoldmandm 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> ASP.NET Core Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> ASP.NET Core Microsoft Yes CVE-2026-70181 Allocation of Resources Without Limits or Throttling 20932 12256 12507 21956 16767 Denial of Service 20932 Denial of Service 12256 Denial of Service 12507 Denial of Service 21956 Denial of Service 16767 Important 20932 Important 12256 Important 12507 Important 21956 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20932 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12256 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12507 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21956 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20932 Yes Security Update 10.0.13 https://support.microsoft.com/help/5130036 20932 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12256 Yes Security Update 8.0.32 https://support.microsoft.com/help/5130034 12256 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12507 Yes Security Update 9.0.21 https://support.microsoft.com/help/5130035 12507 5130035 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Anonymous jhanks <a href="https://www.linkedin.com/in/nguyen-hoang-quoc-an-009863267/">kayiz</a> with <a href="http://lp.com.vn/">Lien Phat Technology Corporation</a> 1.1 2026-10-16T07:00:00 <p>Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> ASP.NET Core Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> ASP.NET Core Microsoft Yes CVE-2026-70183 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 16767 20932 12256 12507 21956 21786 Elevation of Privilege 16767 Elevation of Privilege 20932 Elevation of Privilege 12256 Elevation of Privilege 12507 Elevation of Privilege 21956 Elevation of Privilege 21786 Important 16767 Important 20932 Important 12256 Important 12507 Important 21956 Important 21786 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20932 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12256 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12507 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21786 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20932 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20932 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12256 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12256 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12507 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12507 5130035 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21786 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/460 21786 Release Notes <a href="https://www.linkedin.com/in/jiheun-kim/">l8BL</a> with <a href="https://enki.co.kr/">ENKI WhiteHat</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Backup Engine Elevation of Privilege Vulnerability <p>Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Backup Engine Microsoft Yes CVE-2026-70184 Improper Resolution of Path Equivalence 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 AIフィジカルインターフェイス二号機 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PowerShell Security Feature Bypass Vulnerability <p>Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass Windows Defender Application Control and PowerShell Constrained Language Mode restrictions, allowing untrusted code to run with capabilities those protections are designed to block.</p> Windows PowerShell Microsoft Yes CVE-2026-70185 Authorization Bypass Through User-Controlled Key 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://www.linkedin.com/in/shreydedhia">Shrey Dedhia</a> with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> ASP.NET Core Denial of Service Vulnerability <p>Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> ASP.NET Core Microsoft Yes CVE-2026-70186 Deadlock 21956 16767 20932 12256 12507 Denial of Service 21956 Denial of Service 16767 Denial of Service 20932 Denial of Service 12256 Denial of Service 12507 Important 21956 Important 16767 Important 20932 Important 12256 Important 12507 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21956 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20932 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12256 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12507 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20932 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20932 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12256 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12256 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12507 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12507 5130035 <a href="https://x.com/kookiz/">Kevin Gosse</a> <a href="https://www.linkedin.com/in/abdul-rehman---/">Muhammad Abdul Rehman</a> 1.1 2026-10-16T07:00:00 <p>Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Remote Desktop Services Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Remote Desktop Gateway Service Microsoft Yes CVE-2026-70187 Use After Free 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> ASP.NET Core Security Feature Bypass Vulnerability <p>Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>The authentication feature could be bypassed as this vulnerability allows impersonation.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending specially crafted HTTP/2 requests to an affected server. Successful exploitation could allow the attacker to bypass access controls and reach protected resources. No authentication or user interaction is required.</p> ASP.NET Core Microsoft Yes CVE-2026-70188 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 21956 16767 21786 12507 20932 12256 Security Feature Bypass 21956 Security Feature Bypass 16767 Security Feature Bypass 21786 Security Feature Bypass 12507 Security Feature Bypass 20932 Security Feature Bypass 12256 Important 21956 Important 16767 Important 21786 Important 12507 Important 20932 Important 12256 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21956 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 16767 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21786 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12507 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20932 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12256 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21786 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/462 21786 Release Notes 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12507 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12507 5130035 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20932 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20932 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12256 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12256 5130034 <a href="https://www.linkedin.com/in/hyperxpro/">Aayush Atharva</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for ASP.NET Core 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> SQL Server Microsoft Yes CVE-2026-70189 Heap-based Buffer Overflow 22007 11478 11821 20748 22008 22009 22010 12147 Remote Code Execution 22007 Remote Code Execution 11478 Remote Code Execution 11821 Remote Code Execution 20748 Remote Code Execution 22008 Remote Code Execution 22009 Remote Code Execution 22010 Remote Code Execution 12147 Important 22007 Important 11478 Important 11821 Important 20748 Important 22008 Important 22009 Important 22010 Important 12147 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 5128496 https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b 5122774 22007 Yes Security Update 14.0.3560.2 https://support.microsoft.com/help/5128496 22007 5128496 5128496 https://support.microsoft.com/help/5128496 22007 5128497 https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b 5122775 11478 Yes Security Update 14.0.2140.2 https://support.microsoft.com/help/5128497 11478 5128497 5128497 https://support.microsoft.com/help/5128497 11478 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could create, modify, or delete files in the security context of the &quot;NT AUTHORITY\SYSTEM&quot; account.</p> .NET Microsoft Yes CVE-2026-70190 Improper Link Resolution Before File Access ('Link Following') 12434 20837 21956 16767 21783 Elevation of Privilege 12434 Elevation of Privilege 20837 Elevation of Privilege 21956 Elevation of Privilege 16767 Elevation of Privilege 21783 Important 12434 Important 20837 Important 21956 Important 16767 Important 21783 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Yes Security Update 9.0.319, 9.0.122 https://support.microsoft.com/help/5130035 12434 5130035 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.113 https://support.microsoft.com/help/5130036 20837 5130036 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.100-rc.2 https://github.com/dotnet/announcements/issues/463 21783 Release Notes Coşkun Bağrıa&#231;ık 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Framework Security Feature Bypass Vulnerability <p>Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass certificate validation mechanisms and provide arbitrary certificates that do not have proper signatures.</p> .NET Framework Microsoft Yes CVE-2026-70194 Improper Certificate Validation 21956 16767 21785 21784 Security Feature Bypass 21956 Security Feature Bypass 16767 Security Feature Bypass 21785 Security Feature Bypass 21784 Important 21956 Important 16767 Important 21785 Important 21784 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 21956 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 16767 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 21785 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 21784 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21785 21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/464 21785 21784 Release Notes Kirill Mitrofanov 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-70195 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Owen McCullough with MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> ASP.NET Core Denial of Service Vulnerability <p>Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> ASP.NET Core Microsoft Yes CVE-2026-70196 Inefficient Algorithmic Complexity 20932 12256 12507 21956 16767 Denial of Service 20932 Denial of Service 12256 Denial of Service 12507 Denial of Service 21956 Denial of Service 16767 Important 20932 Important 12256 Important 12507 Important 21956 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20932 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12256 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12507 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21956 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20932 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20932 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12256 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12256 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12507 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12507 5130035 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes <a href="https://x.com/soaj1664ashar">Dr.-Ing Ashar Javed</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET and Visual Studio Remote Code Execution Vulnerability <p>Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> .NET Microsoft Yes CVE-2026-70197 Out-of-bounds Write 21956 16767 20837 12414 12434 21783 22220 22221 22222 22223 22224 22225 22226 22227 22228 22229 22230 22231 22232 22233 22234 Remote Code Execution 21956 Remote Code Execution 16767 Remote Code Execution 20837 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 21783 Remote Code Execution 22220 Remote Code Execution 22221 Remote Code Execution 22222 Remote Code Execution 22223 Remote Code Execution 22224 Remote Code Execution 22225 Remote Code Execution 22226 Remote Code Execution 22227 Remote Code Execution 22228 Remote Code Execution 22229 Remote Code Execution 22230 Remote Code Execution 22231 Remote Code Execution 22232 Remote Code Execution 22233 Remote Code Execution 22234 Important 21956 Important 16767 Important 20837 Important 12414 Important 12434 Important 21783 Important 22220 Important 22221 Important 22222 Important 22223 Important 22224 Important 22225 Important 22226 Important 22227 Important 22228 Important 22229 Important 22230 Important 22231 Important 22232 Important 22233 Important 22234 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22220 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22223 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22226 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22229 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22233 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.43 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/466 21783 Release Notes 5133964 https://dotnet.microsoft.com/download/dotnet/8.0 22220 22221 22222 Yes Security Update 8.0.427 https://support.microsoft.com/help/5133964 22220 22221 22222 5133964 5133965 https://dotnet.microsoft.com/download/dotnet/9.0 22223 22224 22225 Yes Security Update 9.0.320 https://support.microsoft.com/help/5133965 22223 22224 22225 5133965 5133966 https://dotnet.microsoft.com/download/dotnet/10.0 22226 22227 22228 Yes Security Update 10.0.403 https://support.microsoft.com/help/5133966 22226 22227 22228 5133966 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 22229 Yes Security Update 11.0.100-rc.3.26522.148 https://github.com/dotnet/core/blob/main/release-notes/11.0/preview/rc3/11.0.0-rc.3.md 22229 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 22230 22231 Yes Security Update 11.0.100-rc.3 https://github.com/dotnet/core/blob/main/release-notes/11.0/preview/rc3/11.0.0-rc.3.md 22230 22231 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2019/release-history 22232 Yes Security Update 16.11.61 https://learn.microsoft.com/en-us/visualstudio/releases/2019/release-notes 22232 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 22233 Yes Security Update 18.11.2 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 22233 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 22234 Yes Security Update 18.12 Insiders 3 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes-insiders 22234 Release Notes Anonymous <a href="https://x.com/ky0tofu">Ky0toFu</a> <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> <a href="https://x.com/m4x_1997">Aobo Wang</a> Anonymous s3zer0 1.2 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 2.0 2026-10-19T07:00:00 <p>Microsoft is aware that the vulnerability for which this CVE was assigned has not been addressed. We are working to prepare and test a complete mitigation. We will update this document when there is more information.</p> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 2.1 2026-10-25T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> Windows Push Notifications Elevation of Privilege Vulnerability <p>Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Push Notifications Microsoft Yes CVE-2026-70198 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/divyasundar16/">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Kernel Microsoft Yes CVE-2026-70199 Exposure of Sensitive System Information to an Unauthorized Control Sphere 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://linkedin.com/in/dr-sr">Dan Reynolds</a> with MSRC Vulnerabilities &amp; Mitigations Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://x.com/m4x_1997">Aobo Wang</a> ```[fanxiaocao](https://x.com/TinySecEx) and [pjf](https://weibo.com/jfpan)``` pwn2addr <a href="https://x.com/m4x_1997">Aobo Wang</a> <a href="https://x.com/tinysecex">tinysec</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Denial of Service Vulnerability <p>Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.</p> Windows DHCP Server Microsoft Yes CVE-2026-70201 Out-of-bounds Read Use After Free 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/marcosd4h">Marcos Oviedo with Deep Extract Harness</a> sabersauce Linzishan pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70202 Server-Side Request Forgery (SSRF) 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 <a href="https://www.linkedin.com/in/lenguyenkhang/">Le Nguyen Khang (hacnho)</a> with <a href="https://vccorp.vn/">VCCorp</a> <a href="https://www.linkedin.com/in/supawee-foitong/">Supawee Foitong</a> Mert Kuvvet Kn1ght P1hcn duypnh 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-70205 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Owen McCullough with MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Word Microsoft Yes CVE-2026-70206 Out-of-bounds Read 11951 12440 21368 11952 11953 12421 12420 11763 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> Jmini 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Network Policy Server (NPS) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Network Policy Server (NPS) Microsoft Yes CVE-2026-70207 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> HTTP.sys Information Disclosure Vulnerability <p>Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows HTTP.sys Microsoft Yes CVE-2026-70208 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Daejin Lee sweetchip 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>A high attack complexity means that successful exploitation is complex and time‑consuming, requiring significant effort and precise conditions for an attacker to reliably exploit the vulnerability.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70209 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows OLE DB Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows OLE DB Microsoft Yes CVE-2026-70210 Heap-based Buffer Overflow Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Win32k Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70211 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 12155 11951 12440 21368 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12155 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Important 12155 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12155 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Release Notes https://support.microsoft.com/en-us/microsoft-365 12155 Security Update 16.0.20430.20000 https://support.microsoft.com/en-us/microsoft-365 12155 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes <a href="https://linkedin.com/in/dr-sr">Dan Reynolds</a> with MSRC Vulnerabilities &amp; Mitigations byzero, mj with Kunlun Lab &amp; Zhiniang Peng with HUST Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Security Center Elevation of Privilege Vulnerability <p>Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Security Center Microsoft Yes CVE-2026-70212 Improper Restriction of Communication Channel to Intended Endpoints 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 12242 12243 12389 20437 20438 21945 21946 20854 20853 12390 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 12390 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 20437 20438 21945 21946 12390 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Howard McGreehan with MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Power Apps Remote Code Execution Vulnerability <p>Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> Microsoft Power Apps Microsoft Yes CVE-2026-70213 Origin Validation Error 21866 Remote Code Execution 21866 Important 21866 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21866 Release Notes https://play.google.com/store/apps/details?id=com.microsoft.msapps&hl=en_US 21866 No Security Update 3.26085.7 https://play.google.com/store/apps/details?id=com.microsoft.msapps&hl=en_US 21866 Release Notes Rishabh Agrawal Rishabh Agrawal 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-70214 Out-of-bounds Read 11762 11763 11952 11953 12420 12421 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> <a href="https://x.com/gr4ss341">grass</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office PowerPoint Remote Code Execution Vulnerability <p>Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-70215 Use After Free 21368 11762 11763 11951 11952 11953 12420 12421 12440 Remote Code Execution 21368 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Critical 21368 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Mobile Device Management Tampering Vulnerability <p>Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.</p> Windows Mobile Device Management Microsoft Yes CVE-2026-70216 Insufficient Granularity of Access Control 10852 11571 11572 12099 12097 11924 12243 12389 20437 10853 10816 10855 11568 11569 11929 11930 11931 12098 11923 12242 12390 20438 12436 12437 20854 20853 21945 21946 Tampering 10852 Tampering 11571 Tampering 11572 Tampering 12099 Tampering 12097 Tampering 11924 Tampering 12243 Tampering 12389 Tampering 20437 Tampering 10853 Tampering 10816 Tampering 10855 Tampering 11568 Tampering 11569 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12098 Tampering 11923 Tampering 12242 Tampering 12390 Tampering 20438 Tampering 12436 Tampering 12437 Tampering 20854 Tampering 20853 Tampering 21945 Tampering 21946 Important 10852 Important 11571 Important 11572 Important 12099 Important 12097 Important 11924 Important 12243 Important 12389 Important 20437 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12098 Important 11923 Important 12242 Important 12390 Important 20438 Important 12436 Important 12437 Important 20854 Important 20853 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126657 https://support.microsoft.com/help/5126657 12099 12097 11929 11930 11931 12098 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 5126655 https://support.microsoft.com/help/5126655 11924 11923 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 20437 12390 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Information Disclosure Vulnerability <p>Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability relates to SQL table columns that would normally be restricted.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70217 Improper Access Control 11961 Information Disclosure 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.9 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 <a href="https://smlijun.github.io/">DongJun Kim (UIUC)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows StateRepository API Elevation of Privilege Vulnerability <p>Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows StateRepository API Microsoft Yes CVE-2026-70218 Insufficient Granularity of Access Control Improper Authorization 20437 20438 12389 12390 20853 20854 21945 21946 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 pwnky haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-70219 Out-of-bounds Read 11762 11763 11952 11953 12420 12421 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/gr4ss341">grass</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Word Microsoft Yes CVE-2026-70220 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 11951 12440 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes haowei yan Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Shell Elevation of Privilege Vulnerability <p>Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Shell Microsoft Yes CVE-2026-70222 Relative Path Traversal 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Vamshi Krishna Bolly 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Console Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Console Driver Microsoft Yes CVE-2026-70223 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/yaumn_/">Guillaume Andr&#233;</a> with <a href="https://www.synacktiv.com/">Synacktiv</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-70225 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Owen McCullough with MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Device Association Service Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Device Association Service Microsoft Yes CVE-2026-70227 Out-of-bounds Read 12243 12389 12390 20437 20438 12436 12437 12242 20854 20853 21945 21946 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 12242 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 21945 Information Disclosure 21946 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 12436 Important 12437 Important 12242 Important 20854 Important 20853 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://twitter.com/crispr_x">BochengXiang(@Crispr)</a> with FDU 1.0 2026-10-13T07:00:00 <p>Information published.</p> Desktop Window Manager Elevation of Privilege Vulnerability <p>Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Desktop Window Manager Microsoft Yes CVE-2026-70228 Out-of-bounds Read 12389 12390 20437 20438 21945 21946 12436 11568 11569 11571 11572 11929 11931 11930 12099 12097 12098 11923 11924 12243 12242 12437 20853 20854 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11931 Elevation of Privilege 11930 Elevation of Privilege 12099 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 12242 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11931 Important 11930 Important 12099 Important 12097 Important 12098 Important 11923 Important 11924 Important 12243 Important 12242 Important 12437 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11931 11930 12099 12097 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Active Directory Domain Services Remote Code Execution Vulnerability <p>Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Exploitation requires specific conditions, including particular network configurations and timing conditions, and has only been observed in limited scenarios. This means an attacker cannot reliably exploit the issue in all environments and may need favorable setup or circumstances for it to work.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Active Directory Domain Services Microsoft Yes CVE-2026-70229 Incorrect Authorization 21945 21946 10379 10483 10543 10852 10853 10816 11571 11929 11930 12097 12389 12390 20438 12436 12437 20853 10378 10855 11568 11569 11572 11931 12099 12098 11923 11924 12242 12243 20437 20854 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 11571 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 12097 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20438 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20853 Remote Code Execution 10378 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11572 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 20437 Remote Code Execution 20854 Critical 21945 Critical 21946 Critical 10379 Critical 10483 Critical 10543 Critical 10852 Critical 10853 Critical 10816 Critical 11571 Critical 11929 Critical 11930 Critical 12097 Critical 12389 Critical 12390 Critical 20438 Critical 12436 Critical 12437 Critical 20853 Critical 10378 Critical 10855 Critical 11568 Critical 11569 Critical 11572 Critical 11931 Critical 12099 Critical 12098 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 20437 Critical 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 12389 12390 20438 20437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10379 10378 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10379 10378 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11568 11569 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11568 11569 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11568 11569 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 12097 11931 12099 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12099 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12099 12098 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 mad31k 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Audio Service Elevation of Privilege Vulnerability <p>Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Audio Service Microsoft Yes CVE-2026-70230 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Kernel Microsoft Yes CVE-2026-70232 Exposure of Sensitive System Information to an Unauthorized Control Sphere 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 C. England with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Common Log File System Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Common Log File System Driver Microsoft Yes CVE-2026-70233 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/divyasundar16">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Desktop Window Manager Information Disclosure Vulnerability <p>Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Desktop Window Manager Microsoft Yes CVE-2026-70234 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Varun Goel 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Event Tracing Spoofing Vulnerability <p>Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.</p> Windows Event Tracing Microsoft Yes CVE-2026-70235 Missing Authorization 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Spoofing 12389 Spoofing 12390 Spoofing 20437 Spoofing 20438 Spoofing 21945 Spoofing 21946 Spoofing 12436 Spoofing 12437 Spoofing 20854 Spoofing 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70236 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-70237 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Spaces Controller Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Spaces Controller Microsoft Yes CVE-2026-70238 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg &amp; 2st</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kerberos Elevation of Privilege Vulnerability <p>Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kerberos Microsoft Yes CVE-2026-70241 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Outlook Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could send a specially crafted email message to a target user. Simply viewing the message in the Outlook Reading Pane could trigger the vulnerability, without the recipient opening the message or clicking anything in it. Successful exploitation could allow the attacker to execute code on the recipient's system. Network access is required; authentication and user interaction are not required.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-70242 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kernel Microsoft Yes CVE-2026-70243 Use After Free 12437 12242 12243 12436 Elevation of Privilege 12437 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12436 Important 12437 Important 12242 Important 12243 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p> Role: DNS Server Microsoft Yes CVE-2026-70244 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-70245 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Owen McCullough with MSRC V&amp;M WonJoon Hwang 1.1 2026-10-14T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An authenticated attacker with access to the domain could perform remote code execution on the SharePoint server to elevate themselves to SharePoint admin.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70246 Incorrect Authorization 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 Genwei Jiang with <a href="https://cloud.google.com/security/flare">Google Cloud, FLARE OTF</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> HTTP.sys Remote Code Execution Vulnerability <p>Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.</p> Windows HTTP.sys Microsoft Yes CVE-2026-70247 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Denial of Service Vulnerability <p>Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.</p> Windows Hyper-V Microsoft Yes CVE-2026-70248 NULL Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21946 21945 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 21946 Denial of Service 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 <a href="https://x.com/serverinspector">serverinspector</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70249 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Client Remote Code Execution Vulnerability <p>Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network.</p> Windows DHCP Client Microsoft Yes CVE-2026-70250 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12436 Remote Code Execution 12437 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10816 Critical 10855 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12436 Critical 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Linzishan & Anemone & Zhiniang Peng 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-28T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70251 Server-Side Request Forgery (SSRF) 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability <p>Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Virtual Hard Disk (VHD) Miniport Driver Microsoft Yes CVE-2026-70252 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70253 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-70254 Out-of-bounds Read 21368 11762 11763 11952 11953 12420 12421 Remote Code Execution 21368 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Important 21368 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/gr4ss341">grass</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">jmini</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">boolgombear</a> <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Desktop Window Manager Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Desktop Window Manager Microsoft Yes CVE-2026-70255 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Outlook Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-70256 Heap-based Buffer Overflow 12421 12420 11763 11762 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Outlook Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-70257 Heap-based Buffer Overflow Integer Overflow or Wraparound 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">jmini</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">boolgombear</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-70258 Heap-based Buffer Overflow Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Information Disclosure Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>This vulnerability could disclose sensitive information, which might include a user's full trust token.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70259 Server-Side Request Forgery (SSRF) 11961 Information Disclosure 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> Jmini 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Trace Data Helper Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Microsoft Trace Data Helper Microsoft Yes CVE-2026-70260 Exposure of Sensitive System Information to an Unauthorized Control Sphere 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Trace Data Helper Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Microsoft Trace Data Helper Microsoft Yes CVE-2026-70261 Exposure of Sensitive System Information to an Unauthorized Control Sphere 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> WebDAV Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> WebDAV Microsoft Yes CVE-2026-70262 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg &amp; 2st</a> with https://diffract-ai.com/ Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Word Microsoft Yes CVE-2026-70263 Out-of-bounds Read 11951 12440 21368 11952 11953 12421 12420 11763 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Defender Information Disclosure Vulnerability <p>Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p> Microsoft Defender Microsoft Yes CVE-2026-70264 Improper Link Resolution Before File Access ('Link Following') 251 Information Disclosure 251 Important 251 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 251 Release Notes 251 No Security Update 1.1.26090.9 251 Release Notes Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70266 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 waid 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Remote Code Execution Vulnerability <p>Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70267 Inclusion of Functionality from Untrusted Control Sphere 11961 Remote Code Execution 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-70268 Heap-based Buffer Overflow 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-70269 Heap-based Buffer Overflow Integer Overflow or Wraparound 11762 11763 11951 11952 11953 12420 12421 12440 21368 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 21368 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes 0ccbbf129444eb66344ccafb92b00df4 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab Anonymous <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p> Windows Container Isolation FS Filter Driver Microsoft Yes CVE-2026-70270 Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/cyberestro">Mingjia Liu</a> with <a href="https://www.dbappsecurity.com.cn/product/cloud250.html">DBAPPSecurity WeBin Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70271 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 12155 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Remote Code Execution 12155 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Important 12155 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12155 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Release Notes https://support.microsoft.com/en-us/microsoft-365 12155 Security Update 16.0.20430.20000 https://support.microsoft.com/en-us/microsoft-365 12155 Release Notes footballwon 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-70272 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://www.linkedin.com/in/divyasundar16">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70273 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://www.linkedin.com/in/divyasundar16">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Bind Filter Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Bind Filter Driver Microsoft Yes CVE-2026-70274 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST Naveen Singh James Zhong 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows CD-ROM File System Driver Remote Code Execution Vulnerability <p>Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.</p> Windows CD-ROM Driver Microsoft Yes CVE-2026-70275 Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Linzishan Linzishan Anemone Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Office Click-To-Run Elevation of Privilege Vulnerability <p>Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Office Click-To-Run Microsoft Yes CVE-2026-70276 Use After Free 11952 11953 12421 12420 11763 11762 Elevation of Privilege 11952 Elevation of Privilege 11953 Elevation of Privilege 12421 Elevation of Privilege 12420 Elevation of Privilege 11763 Elevation of Privilege 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Fast FAT File System Driver Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p> Windows Fast FAT Driver Microsoft Yes CVE-2026-70277 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://github.com/0x00000ff">Kangjun Heo</a> with <a href="https://plus.cnu.ac.kr/">Chungnam National University</a> byzero with Kunlun Lab &amp; Zhiniang Peng 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-27T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Windows Media Foundation Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-70278 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Exchange Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could send a specially crafted link to a user and persuade them to click it, with no authentication required. If a user with administrative privileges clicks the link, successful exploitation could allow the attacker to perform actions using that user's privileges, potentially allowing access to or modification of organizational data.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user to open a specially crafted link.</p> <p>An attacker would have no way to force users to click the link. Instead, an attacker would have to convince users to click the link through social engineering.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>The vulnerability is in the web server, but the malicious scripts execute in the victim’s browser on their machine.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-70279 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 12502 12293 12039 16792 Spoofing 12502 Spoofing 12293 Spoofing 12039 Spoofing 16792 Important 12502 Important 12293 Important 12039 Important 16792 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 9.3 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12502 9.3 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12293 9.3 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12039 9.3 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 16792 5128896 12502 No Security Update 15.02.1748.055 https://support.microsoft.com/help/5128896 12502 5128896 5128897 12293 No Security Update 15.02.1544.050 https://support.microsoft.com/help/5128897 12293 5128897 5128898 12039 No Security Update 15.01.2507.077 https://support.microsoft.com/help/5128898 12039 5128898 5128895 https://www.microsoft.com/en-us/download/details.aspx?id=108875 16792 No Security Update 15.02.2562.056 https://support.microsoft.com/help/5128895 16792 5128895 P1hcn 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hello Security Feature Bypass Vulnerability <p>Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>This vulnerability could allow an attacker to bypass the Windows biometric authentication feature. A malicious biometric device could be incorrectly recognized as trusted, allowing an attacker to falsely present biometric data and potentially gain access to the device without the legitimate user's fingerprint or face.</p> Windows Hello Microsoft Yes CVE-2026-70280 Incorrect Authorization 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 21945 21946 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 21945 Security Feature Bypass 21946 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://linkedin.com/in/dr-sr">Dan Reynolds</a> with MSRC Vulnerabilities &amp; Mitigations 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Outlook Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-70281 Out-of-bounds Read 21368 11762 11763 11951 11952 11953 12420 12421 12440 Information Disclosure 21368 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Important 21368 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Outlook Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-70282 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">boolgombear</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">jmini</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Win32k Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70284 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70285 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 Anonymous <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Graphics Component Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K - GRFX Microsoft Yes CVE-2026-70286 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-70287 Heap-based Buffer Overflow 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Win32k Information Disclosure Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70288 Time-of-check Time-of-use (TOCTOU) Race Condition 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Outlook Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could send a specially crafted email message to a target user. Simply viewing the message in the Outlook Reading Pane could trigger the vulnerability, without the recipient opening the message or clicking anything in it. Successful exploitation could allow the attacker to execute code on the recipient's system. Network access is required; authentication and user interaction are not required.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-70291 Heap-based Buffer Overflow 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Critical 11951 Critical 12440 Critical 21368 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Win32k Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70292 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Win32k Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70293 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Win32k Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70294 Out-of-bounds Read Improper Input Validation 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Win32k Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-70295 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://x.com/tinysecex">fanxiaocao</a> <a href="https://x.com/tinysecex">tinysec</a> <a href="http://www.aipyaipy.com/">Hcamael and 章鱼哥@aipy</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Skype for Business Remote Code Execution Vulnerability <p>Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker who holds a valid file token could send a specially crafted request containing a path traversal sequence to an affected Skype for Business Persistent Chat server. Successful exploitation could allow the attacker to execute code on the server. User interaction is not required.</p> Skype for Business and Microsoft Lync Microsoft Yes CVE-2026-70297 Absolute Path Traversal 21729 12224 21728 Remote Code Execution 21729 Remote Code Execution 12224 Remote Code Execution 21728 Important 21729 Important 12224 Important 21728 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21729 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12224 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21728 5131692 https://www.microsoft.com/en-us/download/details.aspx?id=108874 21729 No Security Update 7.0.2046.889 https://support.microsoft.com/help/5131692 21729 5131692 5132779 12224 No Security Update 6.0.9319.886 https://support.microsoft.com/help/5132779 12224 5132779 5131693 21728 No Security Update 7.0.2046.583 https://support.microsoft.com/help/5131693 21728 5131693 <a href="https://www.linkedin.com/in/đức-nguyễn-văn-minh-19a925287/">Nguyen Van Minh Duc</a> with <a href="https://saigonnewport.com.vn/">Saigon Newport Corporation</a> <a href="https://www.linkedin.com/in/nagendratiwari01/">Nagendra Tiwari</a> Ethan Walker <a href="https://x.com/mhskai2017">Kai Huang</a> with <a href="https://armadin.com/">Armadin</a> Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Information Disclosure Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70298 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 11961 Information Disclosure 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Bind Filter Driver Elevation of Privilege Vulnerability <p>Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>In this case, a successful attack could be performed from a low privilege <a href="https://docs.microsoft.com/windows/win32/secauthz/appcontainer-isolation">AppContainer</a>. The attacker could elevate their privileges and execute code or access resources at a higher integrity level than that of the AppContainer execution environment.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Bind Filter Driver Microsoft Yes CVE-2026-70299 Incorrect Authorization 12437 12242 12243 12436 Elevation of Privilege 12437 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12436 Important 12437 Important 12242 Important 12243 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could send a specially crafted WordPerfect document with a linked graphics file to a target user. The vulnerability can be triggered when Microsoft Word processes the document in the Reading Pane; the user does not need to open the document. Successful exploitation could allow the attacker to execute code on the user's system. Authentication is not required.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-70300 Untrusted Pointer Dereference 11762 11763 11952 11953 12420 12421 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Critical 11762 Critical 11763 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-70301 Heap-based Buffer Overflow 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-70302 Heap-based Buffer Overflow 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-70303 Out-of-bounds Write 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Volexity with https://www.volexity.com/ Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft MPEG-2 Video Extension Microsoft Yes CVE-2026-70343 Heap-based Buffer Overflow 11936 Remote Code Execution 11936 Important 11936 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11936 Store App https://apps.microsoft.com/detail/9n95q1zzpmh4?launch=true&mode=full&hl=en-US&gl=US&ocid=bingwebsearch 11936 Maybe Security Update 1.2.32.0 https://apps.microsoft.com/detail/9n95q1zzpmh4?launch=true&mode=full&hl=en-US&gl=US&ocid=bingwebsearch 11936 Store App <a href="https://infosec.exchange/@moltenbit">moltenbit</a> with <a href="https://moltenbit.net/">https://moltenbit.net</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Schannel Elevation of Privilege Vulnerability <p>Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Schannel Microsoft Yes CVE-2026-70566 NULL Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 bee13oy with JD 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Exchange Server Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send a specially crafted email to an affected Exchange server, triggering an internal content-conversion process. Successful exploitation could allow the attacker to execute code on the server. Exploitation requires an attacker to have a deep understanding of the target environment and is not guaranteed to succeed. User interaction is not required.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-70571 Stack-based Buffer Overflow 12502 16792 12039 12293 Remote Code Execution 12502 Remote Code Execution 16792 Remote Code Execution 12039 Remote Code Execution 12293 Critical 12502 Critical 16792 Critical 12039 Critical 12293 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12502 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 5128896 12502 No Security Update 15.02.1748.055 https://support.microsoft.com/help/5128896 12502 5128896 5128895 https://www.microsoft.com/en-us/download/details.aspx?id=108875 16792 No Security Update 15.02.2562.056 https://support.microsoft.com/help/5128895 16792 5128895 5128898 12039 No Security Update 15.01.2507.077 https://support.microsoft.com/help/5128898 12039 5128898 5128897 12293 No Security Update 15.02.1544.050 https://support.microsoft.com/help/5128897 12293 5128897 <a href="https://x.com/xamroot">Max Toor</a> with Microsoft <a href="https://smlijun.github.io/">DongJun Kim</a> with UIUC 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Credential Guard Spoofing Vulnerability <p>Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by causing the affected service to become unavailable and impersonating it when it restarts. Successful exploitation could allow the attacker to intercept or alter security operations. User interaction is not required.</p> Windows Credential Guard Microsoft Yes CVE-2026-70580 Missing Authentication for Critical Function 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Spoofing 21945 Spoofing 21946 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 11929 Spoofing 11930 Spoofing 11931 Spoofing 12097 Spoofing 12098 Spoofing 12099 Spoofing 12437 Spoofing 20437 Spoofing 20438 Spoofing 12242 Spoofing 12243 Spoofing 12389 Spoofing 12390 Spoofing 12436 Spoofing 20853 Spoofing 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Microsoft Offensive Research &amp; Security Engineering 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Security Center Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Security Center Microsoft Yes CVE-2026-71347 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 21945 21946 11568 11569 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 10852 10853 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Important 21945 Important 21946 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 10852 Important 10853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 k0shl k0shl 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability <p>Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Program Compatibility Assistant Service Microsoft Yes CVE-2026-72934 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Application Compatibility Cache Elevation of Privilege Vulnerability <p>Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Application Compatibility Cache Microsoft Yes CVE-2026-72955 Use After Free 21945 21946 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability <p>Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Program Compatibility Assistant Service Microsoft Yes CVE-2026-72968 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability <p>Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Program Compatibility Assistant Service Microsoft Yes CVE-2026-72969 Use After Free 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Setup Files Cleanup Elevation of Privilege Vulnerability <p>External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Setup Files Cleanup Microsoft Yes CVE-2026-73027 External Control of System or Configuration Setting 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Imaging Component Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Windows Imaging Component Microsoft Yes CVE-2026-77496 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; npc0vo</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Azure App Service Remote Code Execution Vulnerability <p>Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure App Service Microsoft No CVE-2026-77900 Missing Authentication for Critical Function 11983 Remote Code Execution 11983 Critical 11983 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11983 <a href="https://www.linkedin.com/in/vamsi-nukavarapu/">Vamsi Nukavarapu</a> with <a href="https://www.microsoft.com/">Microsoft</a> 1.0 2026-10-08T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Excel Microsoft Yes CVE-2026-77902 Heap-based Buffer Overflow 21368 11762 11763 11951 11952 11953 12420 12421 12440 Remote Code Execution 21368 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Important 21368 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p>Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low privileges could poison a shared cache used by the Exchange Control Panel, causing a malicious mail add-in to be installed in the context of another user's mailbox. Successful exploitation could allow the attacker to gain elevated privileges in the affected mailbox context. User interaction is not required.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-77910 Incorrect Authorization 16792 12502 12293 12039 Elevation of Privilege 16792 Elevation of Privilege 12502 Elevation of Privilege 12293 Elevation of Privilege 12039 Important 16792 Important 12502 Important 12293 Important 12039 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12502 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 5128895 https://www.microsoft.com/en-us/download/details.aspx?id=108875 16792 No Security Update 15.02.2562.056 https://support.microsoft.com/help/5128895 16792 5128895 5128896 12502 No Security Update 15.02.1748.055 https://support.microsoft.com/help/5128896 12502 5128896 5128897 12293 No Security Update 15.02.1544.050 https://support.microsoft.com/help/5128897 12293 5128897 5128898 12039 No Security Update 15.01.2507.077 https://support.microsoft.com/help/5128898 12039 5128898 odgrso with <a href="https://gmo-cybersecurity.com/">GMO CyberSecurity by Ierae</a> <a href="https://www.linkedin.com/in/stanley-t-62325394/">Stanley Tobias</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Internet Information Services Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Internet Information Services Microsoft Yes CVE-2026-78459 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Identity Web Elevation of Privilege Vulnerability <p>Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could an attacker gain by exploiting this vulnerability?</strong></p> <p>An attacker could obtain another user's access token and access resources permitted by that token. The accessible resources depend on the permissions granted to the affected user's token.</p> <p><strong>What conditions are required to exploit this vulnerability?</strong></p> <p>Successful exploitation requires the application to use a shared token cache and the targeted user to have an active token in that cache.</p> Microsoft Identity Web Microsoft Yes CVE-2026-80092 Authentication Bypass by Assumed-Immutable Data 22059 22058-22039 Elevation of Privilege 22059 Elevation of Privilege 22058-22039 Important 22059 Important 22058-22039 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 22059 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 22058-22039 Release Notes https://www.nuget.org/packages/Microsoft.Identity.Web/4.16.1 22059 No Security Update 4.16.1 https://github.com/AzureAD/microsoft-identity-web/blob/master/changelog.md 22059 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.Identity.Web/3.16.0 22058-22039 No Security Update 3.16.0 https://github.com/AzureAD/microsoft-identity-web/blob/rel/3v/changelog.md 22058-22039 Release Notes David Morrison with University of Edinburgh Tamim Abu Aiash Tahira Muhammad with Student @ College of Southern Nevada <a href="https://www.linkedin.com/company/vantage-security-corporation/">Vantage Sec</a> <a href="https://www.linkedin.com/in/stanley-t-62325394/">Stanley Tobias</a> Jeff Smith with Independent Researcher Anonymous Tamim Abu Aiash 1.0 2026-10-15T07:00:00 <p>Information published.</p> 1.1 2026-10-19T07:00:00 <p>Updated the Security Updates table to list Microsoft Identity Web v3 and v4 separately and clarify the affected version ranges. The existing security updates are versions 3.16.0 and 4.16.1, respectively. This is an informational change only.</p> Windows Update Orchestrator Service Security Feature Bypass Vulnerability <p>Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong> Successful exploitation could bypass provider-registration validation in Windows Update Orchestrator, allowing a local authenticated attacker to register unauthorized provider state.</p> Windows Update Orchestrator Service Microsoft Yes CVE-2026-81964 Use of Hard-coded Credentials 21945 21946 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://www.linkedin.com/in/artemy-tsetsersky/">Artemy Tsetsersky</a> with <a href="https://angarasecurity.com/">Angara Security</a> Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Server Update Service Elevation of Privilege Vulnerability <p>Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Server Update Service Microsoft Yes CVE-2026-81969 Insufficient Granularity of Access Control 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows NTFS Microsoft Yes CVE-2026-81971 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Arjun Vasudeva with MSRC Exploit Research Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Server Update Service Elevation of Privilege Vulnerability <p>Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could execute code in the security context of the “NT AUTHORITY\Network Service” account.</p> Windows Server Update Service Microsoft Yes CVE-2026-83499 Insufficient Granularity of Access Control 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows BitLocker Security Feature Bypass Vulnerability <p>Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass Secure Boot to run unauthorized code. To be successful the attacker would need either physical access or administrator privileges.</p> Windows BitLocker Microsoft Yes CVE-2026-83500 URL Redirection to Untrusted Site ('Open Redirect') 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21945 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21946 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11924 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11929 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11930 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11931 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12097 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12098 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12099 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20437 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20438 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12242 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12243 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12389 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12390 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20853 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20854 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 <a href="https://x.com/alon_leviev">Alon Leviev</a> with Microsoft (STORM) 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows SmartScreen Information Disclosure Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows SmartScreen Microsoft Yes CVE-2026-83504 Time-of-check Time-of-use (TOCTOU) Race Condition 20437 20438 12242 12243 12389 12390 20853 20854 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20853 Information Disclosure 20854 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 20437 20438 Yes Security Update 10.0.26200.9445 https://support.microsoft.com/help/5124008 20437 20438 5124008 5122880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122880 5120240 12242 12243 Yes Security Update 10.0.22631.7582 https://support.microsoft.com/help/5122880 12242 12243 5122880 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 12389 12390 Yes Security Update 10.0.26100.9445 https://support.microsoft.com/help/5124008 12389 12390 5124008 5124012 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124012 5121000 20853 20854 Yes Security Update 10.0.28000.2954 https://support.microsoft.com/help/5124012 20853 20854 5124012 Microsoft Offensive Research &amp; Security Engineering 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Setup Files Cleanup Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Setup Files Cleanup Microsoft Yes CVE-2026-83505 Time-of-check Time-of-use (TOCTOU) Race Condition Untrusted Search Path 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Servicing Stack Updates Elevation of Privilege Vulnerability <p>Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Servicing Stack Updates Microsoft Yes CVE-2026-83506 Untrusted Search Path 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Orchestrator Service Information Disclosure Vulnerability <p>Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p> Windows Update Orchestrator Service Microsoft Yes CVE-2026-83507 Improper Link Resolution Before File Access ('Link Following') 21945 21946 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 yhw &amp; txz Kirill Shamko with <a href="https://global.ptsecurity.com/en/">Positive Technologies</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-83508 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> Jmini Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Setup Files Cleanup Elevation of Privilege Vulnerability <p>Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Setup Files Cleanup Microsoft Yes CVE-2026-83509 Untrusted Search Path 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Setup Files Cleanup Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Setup Files Cleanup Microsoft Yes CVE-2026-83510 Time-of-check Time-of-use (TOCTOU) Race Condition 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Spoofing Vulnerability <p>Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-83511 Weak Authentication 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10483 10543 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 12437 Spoofing 12436 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 10483 Spoofing 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11924 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://www.linkedin.com/in/vaishabernard/">Vaisha Bernard</a> with <a href="https://eye.security/">Eye Security</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-83513 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/renyidudumen">renyimen</a> with https://www.minsight-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Partition Management Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Partition Management Driver Microsoft Yes CVE-2026-83514 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> RPC Runtime Information Disclosure Vulnerability <p>Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> RPC Runtime Microsoft Yes CVE-2026-83515 Use of Uninitialized Resource 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability <p>Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.</p> Windows Local Security Authority Subsystem Service (LSASS) Microsoft Yes CVE-2026-83516 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 12437 20437 20438 12389 12390 12436 20853 20854 Denial of Service 21945 Denial of Service 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-83517 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 haowei yan &amp; xiaozun tang <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> RPC Runtime Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> RPC Runtime Microsoft Yes CVE-2026-83518 Heap-based Buffer Overflow 20437 20438 12242 12243 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 20437 20438 Yes Security Update 10.0.26200.9445 https://support.microsoft.com/help/5124008 20437 20438 5124008 5122880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122880 5120240 12242 12243 Yes Security Update 10.0.22631.7582 https://support.microsoft.com/help/5122880 12242 12243 5122880 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 12389 12390 Yes Security Update 10.0.26100.9445 https://support.microsoft.com/help/5124008 12389 12390 5124008 5124012 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124012 5121000 20853 20854 Yes Security Update 10.0.28000.2954 https://support.microsoft.com/help/5124012 20853 20854 5124012 <a href="https://x.com/TinySecEx">fanxiaocao</a> <a href="https://weibo.com/jfpan">pjf</a> <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> AIフィジカルインターフェイス二号機 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Error Reporting Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Error Reporting Microsoft Yes CVE-2026-83519 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21946 Remote Code Execution 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 haowei yan &amp; xiaozun tang Killer Queen 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> .NET Remote Code Execution Vulnerability <p>Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> .NET Microsoft Yes CVE-2026-83520 Deserialization of Untrusted Data 21956 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 21783 20837 12414 12434 16767 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 Remote Code Execution 21956 Remote Code Execution 12079-21983 Remote Code Execution 12079-21984 Remote Code Execution 12079-21985 Remote Code Execution 12079-21986 Remote Code Execution 12079-12436 Remote Code Execution 12078-21987 Remote Code Execution 12079-21988 Remote Code Execution 12079-11923 Remote Code Execution 12079-21989 Remote Code Execution 21783 Remote Code Execution 20837 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 16767 Remote Code Execution 2472-21987 Remote Code Execution 2472-10378 Remote Code Execution 2472-10483 Remote Code Execution 11723-22028 Remote Code Execution 11723-10816 Remote Code Execution 11723-11571 Remote Code Execution 11677-22029 Remote Code Execution 11676-22029 Remote Code Execution 11676-21983 Remote Code Execution 11676-21984 Remote Code Execution 11676-11571 Remote Code Execution 11676-11923 Remote Code Execution 11863-10378 Remote Code Execution 11863-10483 Remote Code Execution 11650-22028 Remote Code Execution 11650-10378 Remote Code Execution 11650-10483 Remote Code Execution 11650-10816 Important 21956 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Important 21783 Important 20837 Important 12414 Important 12434 Important 16767 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21985 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21986 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21988 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21989 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/467 21783 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 <a href="https://x.com/soaj1664ashar">Dr.-Ing Ashar Javed</a> <a href="https://vincent55.tw/">Vincent55 Yang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows IKE Extension Information Disclosure Vulnerability <p>Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows IKE Extension Microsoft Yes CVE-2026-83521 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows IKE Extension Spoofing Vulnerability <p>Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>How could an attacker exploit this vulnerability?</strong> An unauthenticated network attacker who has obtained the identifiers for an existing IKEv2 security association could send a specially crafted packet to an affected system. Successful exploitation could allow the packet to be processed without required integrity verification and could alter or disrupt the protected connection. User interaction is not required.</p> Windows IKE Extension Microsoft Yes CVE-2026-83522 Reliance on Untrusted Inputs in a Security Decision 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 11929 Spoofing 11930 Spoofing 11931 Spoofing 12097 Spoofing 12098 Spoofing 12099 Spoofing 12437 Spoofing 20437 Spoofing 20438 Spoofing 12242 Spoofing 12243 Spoofing 12389 Spoofing 12390 Spoofing 12436 Spoofing 20853 Spoofing 20854 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Spoofing 21945 Spoofing 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Image Acquisition Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Windows Image Acquisition Microsoft Yes CVE-2026-83523 Heap-based Buffer Overflow 21945 21946 12437 20437 20438 12389 12390 12436 20853 20854 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://x.com/bad_jubies">Grant Hume</a> haowei yan &amp; xiaozun tang <a href="https://www.linkedin.com/in/tamim-abu-aiash-81332b254/">Tamim Abu Aiash</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Search Service Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-83564 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Encrypting File System (EFS) Information Disclosure Vulnerability <p>Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Encrypting File System (EFS) Microsoft Yes CVE-2026-83565 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K - ICOMP Microsoft Yes CVE-2026-83566 Use After Free 21945 21946 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-83567 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability <p>Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could execute code in the security context of the “NT AUTHORITY\Network Service” account.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2026-83568 Missing Authorization 21945 21946 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Meta Red Team X Nik Tsytsarkin with Meta Red Team X 1.0 2026-10-13T07:00:00 <p>Information published.</p> HID Parser Library Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> HID Parser Library Microsoft Yes CVE-2026-83569 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Search Service Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-83570 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Audio Service Information Disclosure Vulnerability <p>Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Audio Service Microsoft Yes CVE-2026-83571 NULL Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel-Mode Driver Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Mode Driver Microsoft Yes CVE-2026-83573 Integer Overflow or Wraparound 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 20437 20438 12389 12390 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Search Service Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-83574 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Search Service Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-83575 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PowerShell Remote Code Execution Vulnerability <p>Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows PowerShell Microsoft Yes CVE-2026-83578 Integer Underflow (Wrap or Wraparound) Integer Overflow or Wraparound Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 bccc95a61a3cc79d7b2c4423c808f744 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Smart Card Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Smart Card Microsoft Yes CVE-2026-83579 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Client-Side Caching (CSC) Service Microsoft Yes CVE-2026-83580 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> TunSk &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Graphics Kernel Information Disclosure Vulnerability <p>Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Graphics Kernel Microsoft Yes CVE-2026-83582 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous byzero, mj with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Geotag Broker Elevation of Privilege Vulnerability <p>Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Geotag Broker Microsoft Yes CVE-2026-83583 Missing Authorization 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/anarcheuz">Anthony Laou Hine Tsuei</a> with <a href="https://www.asymmetric.re/">Asymmetric Research</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Smart Card Elevation of Privilege Vulnerability <p>Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Smart Card Microsoft Yes CVE-2026-83584 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-83585 Use of Externally-Controlled Format String 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability <p>Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Resilient File System (ReFS) Deduplication Service Microsoft Yes CVE-2026-83586 Weak Authentication 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/heegong123">HeeChan Kim</a> with <a href="https://h4c.team/">TeamH4C</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Core Messaging Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Core Messaging Microsoft Yes CVE-2026-83587 Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://twitter.com/ezrak1e">Ezrak1e</a> Killer Queen 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows USB Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Driver Microsoft Yes CVE-2026-83588 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows BitLocker Elevation of Privilege Vulnerability <p>Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows BitLocker Microsoft Yes CVE-2026-83634 Double Free 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg with Diffract <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Denial of Service Vulnerability <p>Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network.</p> Role: DNS Server Microsoft Yes CVE-2026-83635 Out-of-bounds Read 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 mad31k sabersauce 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Denial of Service Vulnerability <p>Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.</p> Windows Hyper-V Microsoft Yes CVE-2026-83636 NULL Pointer Dereference 21945 21946 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Denial of Service 21945 Denial of Service 21946 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">Jmini</a> boolgombear 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2026-83637 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 12242 12243 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 12242 Important 12243 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows USB Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Driver Microsoft Yes CVE-2026-83638 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Thanatos Tian (HKPolyU) &amp; wgg with Diffract fce141fd6b42fcec05c1285b15d8f999 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Sensor Data Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Sensor Data Service Microsoft Yes CVE-2026-83639 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 pwn2addr <a href="https://x.com/hototogisutian">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ <a href="https://x.com/TinySecEx">fanxiaocao</a> and <a href="https://weibo.com/jfpan">pjf</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-11-02T08:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-83640 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> Jmini 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Media Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Media Microsoft Yes CVE-2026-83641 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Domain Name Service Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Role: DNS Server Microsoft Yes CVE-2026-83642 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Linzishan, Anemone and Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Windows Error Reporting Microsoft Yes CVE-2026-83643 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/m4x_1997">Aobo Wang</a> bccc95a61a3cc79d7b2c4423c808f744 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Audio Service Elevation of Privilege Vulnerability <p>Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Audio Service Microsoft Yes CVE-2026-83644 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-83645 Allocation of Resources Without Limits or Throttling 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Spoofing Vulnerability <p>Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-83646 URL Redirection to Untrusted Site ('Open Redirect') 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 12437 Spoofing 12436 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11568 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11569 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11571 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11572 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11923 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11924 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 12437 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 12436 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 10852 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 10853 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 10816 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Active Directory Domain Services Denial of Service Vulnerability <p>Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.</p> Active Directory Domain Services Microsoft Yes CVE-2026-83647 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10483 Denial of Service 10543 Denial of Service 21945 Denial of Service 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Active Directory Domain Services Denial of Service Vulnerability <p>Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.</p> Active Directory Domain Services Microsoft Yes CVE-2026-83648 NULL Pointer Dereference 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 21945 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 21946 Denial of Service 21945 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability <p>Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.</p> Windows Local Security Authority Subsystem Service (LSASS) Microsoft Yes CVE-2026-83649 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Denial of Service 21945 Denial of Service 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Media Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Media Microsoft Yes CVE-2026-83650 Heap-based Buffer Overflow 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 20437 20438 12389 12390 21945 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows GDI Information Disclosure Vulnerability <p>Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows GDI Microsoft Yes CVE-2026-83651 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 12155 11951 12440 21368 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12155 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Important 12155 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12155 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Release Notes https://support.microsoft.com/en-us/microsoft-365 12155 Security Update 16.0.20430.20000 https://support.microsoft.com/en-us/microsoft-365 12155 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Thanatos Tian (HKPolyU) &amp; npc0vo 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-83652 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">Jmini</a> boolgombear hieunt589 with Viettel Cyber Security 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Modern Device Management (MDM) Microsoft Yes CVE-2026-83654 Missing Authentication for Critical Function 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang Lian Owen Anonymous 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Network Policy Server (NPS) Denial of Service Vulnerability <p>Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.</p> Network Policy Server (NPS) Microsoft Yes CVE-2026-83655 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 21945 Denial of Service 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Modern Device Management (MDM) Tampering Vulnerability <p>Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Modern Device Management (MDM) Microsoft Yes CVE-2026-83656 Missing Authentication for Critical Function 11929 12099 12098 11923 11924 12242 20437 11930 11931 12097 12243 12389 12390 20438 12436 12437 20854 20853 21945 21946 Tampering 11929 Tampering 12099 Tampering 12098 Tampering 11923 Tampering 11924 Tampering 12242 Tampering 20437 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 20438 Tampering 12436 Tampering 12437 Tampering 20854 Tampering 20853 Tampering 21945 Tampering 21946 Important 11929 Important 12099 Important 12098 Important 11923 Important 11924 Important 12242 Important 20437 Important 11930 Important 11931 Important 12097 Important 12243 Important 12389 Important 12390 Important 20438 Important 12436 Important 12437 Important 20854 Important 20853 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 12099 12098 11930 11931 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 12389 12390 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Modern Device Management (MDM) Tampering Vulnerability <p>Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.</p> Windows Modern Device Management (MDM) Microsoft Yes CVE-2026-83657 Weak Authentication 11568 11569 11571 11572 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Important 11568 Important 11569 Important 11571 Important 11572 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Information Disclosure Vulnerability <p>Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Error Reporting Microsoft Yes CVE-2026-83658 Missing Authorization 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows User Profile Service Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows User Profile Service Microsoft Yes CVE-2026-83659 Improper Link Resolution Before File Access ('Link Following') 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 haowei yan &amp; xiaozun tang Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Portable Device File System Driver Information Disclosure Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Portable Device File System Driver Microsoft Yes CVE-2026-83664 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://twitter.com/4zure9">Azure Yang</a> with <a href="http://www.cyberkl.com/">Kunlun Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Denial of Service Vulnerability <p>Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.</p> Windows DHCP Server Microsoft Yes CVE-2026-83665 NULL Pointer Dereference 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Linzishan Jonghoi Kim Donghyeon Oh with <a href="http://kloy.ai/">KloyLab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Active Directory Certificate Services (AD CS) Microsoft Yes CVE-2026-83666 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Active Directory Domain Services Denial of Service Vulnerability <p>Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.</p> Active Directory Domain Services Microsoft Yes CVE-2026-83667 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 21945 Denial of Service 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows WLAN Service Information Disclosure Vulnerability <p>Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows WLAN Service Microsoft Yes CVE-2026-83668 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Elevation of Privilege Vulnerability <p>Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Error Reporting Microsoft Yes CVE-2026-83669 Use of Uninitialized Resource 21945 21946 10816 10855 11572 11929 11930 11931 12098 12242 20437 12436 20854 10852 10853 11568 11569 11571 12099 12097 11923 11924 12243 12389 12390 20438 12437 20853 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12098 Elevation of Privilege 12242 Elevation of Privilege 20437 Elevation of Privilege 12436 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 12099 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20438 Elevation of Privilege 12437 Elevation of Privilege 20853 Important 21945 Important 21946 Important 10816 Important 10855 Important 11572 Important 11929 Important 11930 Important 11931 Important 12098 Important 12242 Important 20437 Important 12436 Important 20854 Important 10852 Important 10853 Important 11568 Important 11569 Important 11571 Important 12099 Important 12097 Important 11923 Important 11924 Important 12243 Important 12389 Important 12390 Important 20438 Important 12437 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 12389 12390 20438 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 10852 10853 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11572 11568 11569 11571 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11572 11568 11569 11571 5126651 5126651 https://support.microsoft.com/help/5126651 11572 11568 11569 11571 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12098 12099 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12098 12099 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12098 12099 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability <p>Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Function Discovery Service (fdwsd.dll) Microsoft Yes CVE-2026-83670 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Hyper-V Microsoft Yes CVE-2026-83671 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 ACS MDASH with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Installer Microsoft Yes CVE-2026-83672 Exposure of Sensitive System Information to an Unauthorized Control Sphere 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang <a href="https://x.com/calysteon">Nathaniel Oh (@calysteon)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Spoofing Vulnerability <p>Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-83674 Weak Authentication 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 12437 Spoofing 12436 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kernel Microsoft Yes CVE-2026-83675 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. H2O with VGCO - Vietnam Germany Connection <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-83676 Integer Underflow (Wrap or Wraparound) Heap-based Buffer Overflow 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous <a href="https://x.com/hototogisutian">Thanatos Tian (HKPolyU) &amp; npc0vo</a> with https://diffract-ai.com/ haowei yan &amp; xiaozun tang 0ccbbf129444eb66344ccafb92b00df4 Anonymous <a href="https://www.linkedin.com/feed/">Francisco Jos&#233; Carot Ripoll&#233;s (RipFran)</a> with <a href="https://www.linkedin.com/company/kpmg-espana/">KPMG Spain</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Client Denial of Service Vulnerability <p>Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.</p> Windows DHCP Client Microsoft Yes CVE-2026-83677 Missing Release of Memory after Effective Lifetime 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 21945 Denial of Service 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Jay Ladhad 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows TCP/IP Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows TCP/IP Microsoft Yes CVE-2026-83678 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/ehd_rjs">Kim Donggeon</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Defender Firewall Service Elevation of Privilege Vulnerability <p>Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Defender Firewall Service Microsoft Yes CVE-2026-83679 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-83680 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 haowei yan &amp; xiaozun tang Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PowerToys Tampering Vulnerability <p>Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.</p> Microsoft PowerToys Microsoft Yes CVE-2026-83681 Weak Authentication 21354 Tampering 21354 Important 21354 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21354 Release Notes https://github.com/microsoft/PowerToys/releases/ 21354 No Security Update 0.102.0 21354 Release Notes <a href="https://www.linkedin.com/in/erencanozmen/">Eren Can &#214;zmen</a> with InfinitumIT Alfirevic Andrej 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows TCP/IP Elevation of Privilege Vulnerability <p>Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows TCP/IP Microsoft Yes CVE-2026-83682 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Encrypting File System (EFS) Information Disclosure Vulnerability <p>Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p> Windows Encrypting File System (EFS) Microsoft Yes CVE-2026-83683 Absolute Path Traversal 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 haowei yan &amp; xiaozun tang Landon Peng (lunbun) with Lunbun LLC 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability <p>Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.</p> Windows IKE Extension Microsoft Yes CVE-2026-83685 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 21945 Denial of Service 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-83686 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 wxz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability <p>Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Connected User Experiences and Telemetry Microsoft Yes CVE-2026-83687 Use After Free 12242 20437 12436 12437 20853 12243 12389 12390 20438 20854 21945 21946 Elevation of Privilege 12242 Elevation of Privilege 20437 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20438 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12242 Important 20437 Important 12436 Important 12437 Important 20853 Important 12243 Important 12389 Important 12390 Important 20438 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 12389 12390 20438 21945 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous AIフィジカルインターフェイス二号機 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Remote Desktop Client Microsoft Yes CVE-2026-83688 Heap-based Buffer Overflow Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Elevation of Privilege Vulnerability <p>Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Error Reporting Microsoft Yes CVE-2026-83689 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-83690 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/divyasundar16/">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DHCP Server Microsoft Yes CVE-2026-83691 Heap-based Buffer Overflow 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 20437 20438 12389 12390 21945 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> sweetchip Daejin Lee 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Bind Filter Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Bind Filter Driver Microsoft Yes CVE-2026-83692 Heap-based Buffer Overflow 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Yongha Lee <a href="https://x.com/bad_jubies">Grant Hume</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Error Reporting Microsoft Yes CVE-2026-83693 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Volume Manager Extension Driver Microsoft Yes CVE-2026-83694 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Event Logging Service Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows Event Logging Service Microsoft Yes CVE-2026-83695 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan Steven F with SpecterOps 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Cloud Files Mini Filter Driver Microsoft Yes CVE-2026-83696 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Liang Zhu Anonymous <a href="https://linkedin.com/in/ghirmay">Ghirmay Desta</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Modern Device Management (MDM) Tampering Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Modern Device Management (MDM) Microsoft Yes CVE-2026-83697 Time-of-check Time-of-use (TOCTOU) Race Condition 11923 11924 12242 12243 12389 12390 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 20437 20438 21945 21946 12436 12437 20854 20853 Tampering 11923 Tampering 11924 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12099 Tampering 12098 Tampering 12097 Tampering 20437 Tampering 20438 Tampering 21945 Tampering 21946 Tampering 12436 Tampering 12437 Tampering 20854 Tampering 20853 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Client-Side Caching (CSC) Service Microsoft Yes CVE-2026-83698 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/m4x_1997">Aobo Wang</a> TunSk &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Client-Side Caching (CSC) Service Microsoft Yes CVE-2026-83699 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Now Playing Session Manager Elevation of Privilege Vulnerability <p>Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Now Playing Session Manager Microsoft Yes CVE-2026-83700 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Now Playing Session Manager Elevation of Privilege Vulnerability <p>Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Now Playing Session Manager Microsoft Yes CVE-2026-83701 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-83702 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Wi-Fi Driver Denial of Service Vulnerability <p>Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.</p> Windows Wi-Fi Driver Microsoft Yes CVE-2026-83703 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 21945 Denial of Service 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-83704 Improper Link Resolution Before File Access ('Link Following') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Tahir with Tinglan@Farsight q1ugu with Tinglan@Farsight Landon Peng (lunbun) with Lunbun LLC 1.0 2026-10-13T07:00:00 <p>Information published.</p> HTTP.sys Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows HTTP.sys Microsoft Yes CVE-2026-83705 Exposure of Sensitive System Information to an Unauthorized Control Sphere 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 sweetchip Daejin Lee yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-83706 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5122871 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122871 5120233 12437 12436 Yes Security Update 10.0.26100.33438 https://support.microsoft.com/help/5122871 12437 12436 5122871 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 20437 20438 Yes Security Update 10.0.26200.9445 https://support.microsoft.com/help/5124008 20437 20438 5124008 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 12389 12390 Yes Security Update 10.0.26100.9445 https://support.microsoft.com/help/5124008 12389 12390 5124008 5124012 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124012 5121000 20853 20854 Yes Security Update 10.0.28000.2954 https://support.microsoft.com/help/5124012 20853 20854 5124012 <a href="https://www.linkedin.com/in/david-c-826599a4/">David Carliez</a> with DC Cybersecurity 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Event Tracing Elevation of Privilege Vulnerability <p>Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Event Tracing Microsoft Yes CVE-2026-83707 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-83708 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous AIフィジカルインターフェイス二号機 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTLM Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTLM Microsoft Yes CVE-2026-83709 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> yuband TunSk &amp; Zhiniang Peng 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Device Association Service Elevation of Privilege Vulnerability <p>Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Device Association Service Microsoft Yes CVE-2026-83710 Use After Free 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 20437 20438 12389 12390 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-83712 Out-of-bounds Write 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Sameed Ali 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-83713 Exposure of Sensitive System Information to an Unauthorized Control Sphere 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 sweetchip Daejin Lee 1.0 2026-10-13T07:00:00 <p>Information published.</p> HTTP.sys Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows HTTP.sys Microsoft Yes CVE-2026-83714 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 sweetchip Daejin Lee 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Tampering Vulnerability <p>Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.</p> Windows Error Reporting Microsoft Yes CVE-2026-83715 Missing Authentication for Critical Function 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Tampering 10852 Tampering 10853 Tampering 10816 Tampering 10855 Tampering 10378 Tampering 10379 Tampering 10483 Tampering 10543 Tampering 21945 Tampering 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11924 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11929 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11930 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11931 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12097 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12098 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12099 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20438 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12242 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12243 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12389 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12390 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20854 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10378 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10379 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to send a specific series of networking requests to the VMswitch driver triggering a use after free vulnerability in the Hyper-V host which grants host privileges that could be used to perform arbitrary code execution.</p> Windows Hyper-V Microsoft Yes CVE-2026-83716 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Dawnflare Artur Stetsko Dawnflare 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-83717 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-83718 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Servicing Stack Updates Information Disclosure Vulnerability <p>Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Servicing Stack Updates Microsoft Yes CVE-2026-83719 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan GraVity0 6ucy 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kerberos Elevation of Privilege Vulnerability <p>Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kerberos Microsoft Yes CVE-2026-83720 Use After Free 20853 20854 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-83721 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> Wenguang Jiao 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability <p>Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Local Security Authority Server (lsasrv) Microsoft Yes CVE-2026-83722 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Event Logging Service Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized stack memory.</p> Windows Event Logging Service Microsoft Yes CVE-2026-83723 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Management Instrumentation Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Management Instrumentation Microsoft Yes CVE-2026-83724 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-83725 Heap-based Buffer Overflow Integer Overflow or Wraparound 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-83726 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Elevation of Privilege Vulnerability <p>Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Overlay Filter Microsoft Yes CVE-2026-83727 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">Jmini</a> boolgombear Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Spoofing Vulnerability <p>Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker running code in a Hyper-V guest could send a specially crafted network packet through the Hyper-V Virtual Switch. Successful exploitation could allow the attacker to bypass MAC-address spoofing protections and impersonate another network endpoint, which could enable interception, modification, or disruption of network traffic. User interaction is not required.</p> Windows Hyper-V Microsoft Yes CVE-2026-83728 Improper Validation of Syntactic Correctness of Input 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Spoofing 21945 Spoofing 21946 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 11929 Spoofing 11930 Spoofing 11931 Spoofing 12097 Spoofing 12098 Spoofing 12099 Spoofing 12437 Spoofing 20437 Spoofing 20438 Spoofing 12242 Spoofing 12243 Spoofing 12389 Spoofing 12390 Spoofing 12436 Spoofing 20853 Spoofing 20854 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-83732 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Print Spooler Components Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Print Spooler Components Microsoft Yes CVE-2026-83733 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-83735 Release of Invalid Pointer or Reference 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 niulai sweetchip Daejin Lee 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Windows Kernel Microsoft Yes CVE-2026-83736 Heap-based Buffer Overflow 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Coşkun Bağrıa&#231;ık <a href="https://x.com/m4x_1997">Aobo Wang</a> 6ucy <a href="https://z.ai/">Yuki Chen using GLM from z.ai</a> OOOooooooOOO GraVity0 <a href="https://x.com/aby860">aby860</a> and VXXDXX4XLL Sechack 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Information Disclosure Vulnerability <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows NTFS Microsoft Yes CVE-2026-83737 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-83738 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Bluetooth Service Remote Code Execution Vulnerability <p>Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Bluetooth Service Microsoft Yes CVE-2026-83739 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/ky0tofu">Ky0toFu</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hello Elevation of Privilege Vulnerability <p>Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Hello Microsoft Yes CVE-2026-83740 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Internet Explorer Elevation of Privilege Vulnerability <p>Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Internet Explorer Microsoft Yes CVE-2026-83741 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Skype for Business Elevation of Privilege Vulnerability <p>Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker would be able to delete targeted files on a system.</p> Skype for Business and Microsoft Lync Microsoft Yes CVE-2026-83746 Absolute Path Traversal 21729 21728 12224 Elevation of Privilege 21729 Elevation of Privilege 21728 Elevation of Privilege 12224 Important 21729 Important 21728 Important 12224 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 21729 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 21728 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12224 5131692 https://www.microsoft.com/en-us/download/details.aspx?id=108874 21729 No Security Update 7.0.2046.889 https://support.microsoft.com/help/5131692 21729 5131692 5131693 21728 No Security Update 7.0.2046.583 https://support.microsoft.com/help/5131693 21728 5131693 5132779 12224 No Security Update 6.0.9319.886 https://support.microsoft.com/help/5132779 12224 5132779 P1hcn 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Error Reporting Microsoft Yes CVE-2026-83747 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Error Reporting Microsoft Yes CVE-2026-83748 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21946 Remote Code Execution 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Elevation of Privilege Vulnerability <p>Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Overlay Filter Microsoft Yes CVE-2026-83749 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 Thanatos Tian (HKPolyU) &amp; wgg 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Error Reporting Microsoft Yes CVE-2026-83750 Time-of-check Time-of-use (TOCTOU) Race Condition Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows MIDI Service Module Elevation of Privileges Vulnerability <p>Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows MIDI Service Module Microsoft Yes CVE-2026-83751 Use After Free 20437 20438 12389 12390 20853 20854 21945 21946 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-83752 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Camera Frame Server Monitor Microsoft Yes CVE-2026-83753 Heap-based Buffer Overflow 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft OpenSSH for Windows Remote Code Execution Vulnerability <p>Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> OpenSSH for Windows Microsoft Yes CVE-2026-83754 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://in.linkedin.com/in/thesecguy">Owais Lone</a> Muhammad Egi Perdianza 1.0 2026-10-13T07:00:00 <p>Information published.</p> Win32k Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain memory address within kernel space. Knowing the exact location of kernel memory could be potentially leveraged by an attacker for other malicious activities.</p> Windows Win32K Microsoft Yes CVE-2026-83755 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-83756 Use After Free 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-83757 Heap-based Buffer Overflow 21945 21946 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.</p> Windows Error Reporting Microsoft Yes CVE-2026-83758 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Encrypting File System (EFS) Remote Code Execution Vulnerability <p>Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low-level access to an affected server could send a specially crafted request to execute code on the server. User interaction is not required.</p> Windows Encrypting File System (EFS) Microsoft Yes CVE-2026-83759 Improper Control of Generation of Code ('Code Injection') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Landon Peng (lunbun) with Lunbun LLC 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Bluetooth Driver Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Microsoft Bluetooth Driver Microsoft Yes CVE-2026-83760 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-83761 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-83762 Use After Free 21946 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 21945 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Input System Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Input System Microsoft Yes CVE-2026-83763 Access of Resource Using Incompatible Type ('Type Confusion') 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Clipboard User Service Information Disclosure Vulnerability <p>Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized read-only access to the local file system.</p> Windows Clipboard User Service Microsoft Yes CVE-2026-83764 Incorrect Authorization 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Information Disclosure Vulnerability <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows DWM Core Library Microsoft Yes CVE-2026-83765 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Security Feature Bypass Vulnerability <p>Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>This Hyper-V vulnerability relates to a Virtual Machine Switch with virtual networking in Hyper-V Network Virtualization (HNV). It might be possible to bypass extended ACLs and other Windows security feature checks.</p> <p>See <a href="https://docs.microsoft.com/en-us/windows-server/virtualization/hyper-v-virtual-switch/create-security-policies-with-extended-port-access-control-lists">Create Security Policies with Extended Port Access Control Lists</a> for information about extended ACLs.</p> Windows Hyper-V Microsoft Yes CVE-2026-83766 Incorrect Authorization 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10853 10816 10855 21945 21946 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 21945 Security Feature Bypass 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 4.2 3.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 PuH4ck3rX 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-83767 Stack-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-83768 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability <p>Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> OpenSSH for Windows Microsoft Yes CVE-2026-83769 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Text Shaping Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Text Shaping Microsoft Yes CVE-2026-83770 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability <p>Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Camera Frame Server Monitor Microsoft Yes CVE-2026-83771 Use After Free 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan <a href="https://x.com/hototogisutian">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ <a href="https://www.linkedin.com/in/byunghyun10211">Byunghyun Kang</a> with KAIST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows MIDI Service Module Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Windows MIDI Service Module Microsoft Yes CVE-2026-83773 Exposure of Sensitive System Information to an Unauthorized Control Sphere 21945 21946 20437 20438 12389 12390 20853 20854 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20853 Information Disclosure 20854 Important 21945 Important 21946 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-83774 Exposure of Sensitive System Information to an Unauthorized Control Sphere 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-83775 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Bluetooth Driver Elevation of Privilege Vulnerability <p>Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Bluetooth Driver Microsoft Yes CVE-2026-83776 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg with Diffract <a href="https://x.com/tinysecex">fanxiaocao</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Bluetooth Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Bluetooth Service Microsoft Yes CVE-2026-83777 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Internet Messaging API Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Internet Messaging API Microsoft Yes CVE-2026-83778 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous Anonymous Dawnflare 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-83779 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows CCFFilter Driver Remote Code Execution Vulnerability <p>Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows CCFFilter Driver Microsoft Yes CVE-2026-83780 Use After Free 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability <p>Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Program Compatibility Assistant Service Microsoft Yes CVE-2026-83781 Improper Null Termination 21945 21946 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Shell Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Shell Microsoft Yes CVE-2026-83782 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous <a href="https://x.com/acoglanis_">Casandra</a> with <a href="https://num.ar/">NUM</a> 1.1 2026-10-20T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Management Instrumentation Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Management Instrumentation Microsoft Yes CVE-2026-83783 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability <p>Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Encrypting File System (EFS) Microsoft Yes CVE-2026-83784 Absolute Path Traversal 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Landon Peng (lunbun) with Lunbun LLC 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows COM+ Event System Service Elevation of Privilege Vulnerability <p>Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows COM+ Event System Service Microsoft Yes CVE-2026-83785 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Information Disclosure Vulnerability <p>Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows NTFS Microsoft Yes CVE-2026-83786 Generation of Error Message Containing Sensitive Information 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://twitter.com/thunderj17">Thunder_J</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Security Feature Bypass Vulnerability <p>Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong> Successful exploitation could bypass DHCPv6 address-assignment validation and cause a server response to omit an address that should be assigned.</p> Windows DHCP Server Microsoft Yes CVE-2026-83787 Authentication Bypass Using an Alternate Path or Channel 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 12437 Security Feature Bypass 12436 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/marcosd4h">Marcos Oviedo with Deep Extract Harness</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows rndismp6.sys Information Disclosure Vulnerability <p>Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.</p> Windows RNDIS Microsoft Yes CVE-2026-83788 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows SMB Client Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows SMB Client Microsoft Yes CVE-2026-83789 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/m4x_1997">Aobo Wang</a> <a href="https://x.com/aby860">aby860</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hello Elevation of Privilege Vulnerability <p>Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Hello Microsoft Yes CVE-2026-83790 Use After Free 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 21945 21946 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Virtual Input Elevation of Privilege Vulnerability <p>Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Virtual Input Microsoft Yes CVE-2026-83791 Unverified Ownership 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/eyzhang28">Eric Zhang</a> with <a href="https://generalanalysis.com/">General Analysis</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Device Install Service Elevation of Privilege Vulnerability <p>Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Device Install Service Microsoft Yes CVE-2026-83792 Incorrect Authorization 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Orchestrator Service Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Update Orchestrator Service Microsoft Yes CVE-2026-83793 Improper Link Resolution Before File Access ('Link Following') 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Kirill Shamko with <a href="https://positechglobal.com/en/">Positive Technologies</a> haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Portable Device MTP Driver Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Portable Device MTP Driver Microsoft Yes CVE-2026-83794 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability <p>Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.</p> Windows IKE Extension Microsoft Yes CVE-2026-83795 Heap-based Buffer Overflow Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 21945 Denial of Service 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-83796 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Gabriela Kote with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Partition Management Driver Remote Code Execution Vulnerability <p>Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Windows Partition Management Driver Microsoft Yes CVE-2026-83797 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Linzishan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Stack Spoofing Vulnerability <p>Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.</p> Windows Update Stack Microsoft Yes CVE-2026-83798 Improper Verification of Cryptographic Signature Improper Input Validation 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 11929 Spoofing 11930 Spoofing 11931 Spoofing 12097 Spoofing 12098 Spoofing 12099 Spoofing 12437 Spoofing 20437 Spoofing 20438 Spoofing 12242 Spoofing 12243 Spoofing 12389 Spoofing 12390 Spoofing 12436 Spoofing 20853 Spoofing 20854 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Spoofing 21945 Spoofing 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> Windows Error Reporting Microsoft Yes CVE-2026-83826 Untrusted Pointer Dereference 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Bluetooth Port Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Bluetooth Port Driver Microsoft Yes CVE-2026-83827 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows MIDI Service Module Elevation of Privileges Vulnerability <p>Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows MIDI Service Module Microsoft Yes CVE-2026-83828 Heap-based Buffer Overflow Integer Overflow or Wraparound 20437 20438 12389 12390 20853 20854 21945 21946 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/m4x_1997">Aobo Wang</a> Anonymous mohammadmobinjavan(Xaloglu) kang mohammadmobinjavan(Xaloglu) 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-11-02T08:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-83829 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows COM+ Event System Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows COM+ Event System Service Microsoft Yes CVE-2026-83830 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-83831 Double Free 22251 Remote Code Execution 22251 Important 22251 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22251 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 22251 Security Update 154.0.4258.48 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes yhw Antti Levom&#228;ki with Forcepoint Christian Jalio with Forcepoint Anonymous 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-26T07:00:00 <p>Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.</p> Windows Spaceport.sys Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Spaceport.sys Microsoft Yes CVE-2026-83832 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg &amp; 2st</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-83833 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2026-83834 Use After Free Time-of-check Time-of-use (TOCTOU) Race Condition 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/cory-rondorf-41788b209/">Cory Rondorf</a> OOOooooooOOO GraVity0 <a href="https://www.linkedin.com/in/pravin-choudhary-b9515b29a/">Praveen Choudhary</a> <a href="https://hw4yeon.github.io/">hw4yeon</a> <a href="https://github.com/jhlee0507">r3con</a> <a href="https://github.com/4hnov">4hnov</a> byzero, mj with Kunlun Lab &amp; Zhiniang Peng with HUST Anonymous <a href="https://x.com/z0v3r1n">z0v3r1n</a> <a href="https://github.com/jiy2745">step_jo</a> ZeroBig2738 <a href="https://x.com/hototogisutian">Thanatos Tian (HKPolyU) &amp; npc0vo</a> with https://diffract-ai.com/ j_any0 <a href="https://github.com/developer-commit">developer-commit</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Common Log File System Driver Information Disclosure Vulnerability <p>Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Common Log File System Driver Microsoft Yes CVE-2026-83835 Buffer Over-read Exposure of Sensitive System Information to an Unauthorized Control Sphere 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/malware_owl">owl4444</a> uhg 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Event Tracing Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Windows Event Tracing Microsoft Yes CVE-2026-83836 Heap-based Buffer Overflow Integer Underflow (Wrap or Wraparound) 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability <p>Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2026-83837 Unintended Proxy or Intermediary ('Confused Deputy') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 12242 12243 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 12242 Important 12243 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://www.linkedin.com/in/cory-rondorf-41788b209/">Cory Rondorf</a> with <a href="https://www.parsons.com/">Parsons Corporation</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability <p>Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Bluetooth A2DP driver Microsoft Yes CVE-2026-83838 Integer Underflow (Wrap or Wraparound) 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://x.com/alexjplaskett">Alex Plaskett</a> with <a href="https://www.nccgroup.com/">NCC Group</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Hyper-V Microsoft Yes CVE-2026-83839 Time-of-check Time-of-use (TOCTOU) Race Condition 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Paul Biernat with Microsoft MORSE 1.1 2026-10-20T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Elevation of Privilege Vulnerability <p>Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Error Reporting Microsoft Yes CVE-2026-83840 Weak Authentication 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous AIフィジカルインターフェイス二号機 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-83841 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 k3won 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows TCP/IP Elevation of Privilege Vulnerability <p>Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows TCP/IP Microsoft Yes CVE-2026-83842 Double Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 ELDEN 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability <p>Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.</p> Windows Internet Key Exchange (IKE) Protocol Microsoft Yes CVE-2026-83843 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 21945 Denial of Service 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Paint Remote Code Execution Vulnerability <p>Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Paint Microsoft Yes CVE-2026-83844 Out-of-bounds Read 22026 Remote Code Execution 22026 Important 22026 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22026 Store App https://apps.microsoft.com/detail/9pcfs5b6t72h?hl=en-US&gl=SG 22026 Maybe Security Update 11.2609.401.0 https://apps.microsoft.com/detail/9pcfs5b6t72h?hl=en-US&gl=SG 22026 Store App Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Internet (wininet.dll) Spoofing Vulnerability <p>Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.</p> <p><strong>How could an attacker exploit this vulnerability?</strong> An attacker running code in a low-integrity AppContainer could send a local request that claims the identity of another package belonging to the same user. Successful exploitation could allow the attacker to read or modify the other package's cookies. No additional user interaction is required.</p> Windows Internet (wininet.dll) Microsoft Yes CVE-2026-83845 Authentication Bypass by Spoofing 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Spoofing 11923 Spoofing 11924 Spoofing 11929 Spoofing 11930 Spoofing 11931 Spoofing 12097 Spoofing 12098 Spoofing 12099 Spoofing 12437 Spoofing 20437 Spoofing 20438 Spoofing 12242 Spoofing 12243 Spoofing 12389 Spoofing 12390 Spoofing 12436 Spoofing 20853 Spoofing 20854 Spoofing 21945 Spoofing 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11924 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11929 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11930 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11931 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12097 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12098 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12099 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20437 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20438 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12242 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12243 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12389 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12390 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20853 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20854 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 21945 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability <p>Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Connected Devices Platform Service (Cdpsvc) Microsoft Yes CVE-2026-83846 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Account Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Account Microsoft Yes CVE-2026-83847 Heap-based Buffer Overflow Integer Overflow or Wraparound 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows COM+ Event System Service Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows COM+ Event System Service Microsoft Yes CVE-2026-83848 Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hello Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Hello Microsoft Yes CVE-2026-83849 Out-of-bounds Read 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 21946 21945 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21946 Information Disclosure 21945 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 <a href="https://twitter.com/crispr_x">BochengXiang(@Crispr)</a> with FDU 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-83850 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Partition Management Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Windows Partition Management Driver Microsoft Yes CVE-2026-83851 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Linzishan Linzishan & Anemone & Zhiniang Peng <a href="https://x.com/hototogisutian">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-28T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.2 2026-10-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Bind Filter Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Bind Filter Driver Microsoft Yes CVE-2026-83852 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hello Elevation of Privilege Vulnerability <p>Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Hello Microsoft Yes CVE-2026-83853 Use After Free 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 21946 21945 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Notification Information Disclosure Vulnerability <p>Improper access control in Windows Notification allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong> Successful exploitation could allow a local attacker to view toast notification content belonging to another user signed in to the same system.</p> Windows Notification Microsoft Yes CVE-2026-83854 Missing Authentication for Critical Function 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 jsane 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows WLAN Service Denial of Service Vulnerability <p>Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.</p> Windows WLAN Service Microsoft Yes CVE-2026-83855 Integer Underflow (Wrap or Wraparound) 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 21945 Denial of Service 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Event Logging Service Remote Code Execution Vulnerability <p>Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Event Logging Service Microsoft Yes CVE-2026-83856 Out-of-bounds Read 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 21945 Remote Code Execution 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-83857 Stack-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-83859 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg &amp; 2st</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows GDI Denial of Service Vulnerability <p>Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.</p> Windows GDI Microsoft Yes CVE-2026-83860 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 21945 Denial of Service 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Lucia Adams with MSRC V&amp;M <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; npc0vo</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Remote Desktop Protocol Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Desktop Protocol Microsoft Yes CVE-2026-83861 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://github.com/lon3wolf">Sanil Singh Tomar</a> with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Network Load Balancing Remote Code Execution Vulnerability <p>Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Network Load Balancing Microsoft Yes CVE-2026-83862 Use After Free 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Pwnforr777 1.1 2026-10-23T07:00:00 <p>Corrected the CVSS Attack Vector metric from Network (AV:N) to Adjacent (AV:A) to reflect the requirement for Layer 2 network adjacency. The CVSS base score has decreased from 9.8 to 8.8. This is an informational change only. Customers who have successfully installed the update do not need to take any further action.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Servicing Stack Updates Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Servicing Stack Updates Microsoft Yes CVE-2026-83863 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126649 5122874 10852 10853 10816 10855 Yes Security Update 10.0.14393.9596 https://support.microsoft.com/help/5126649 10852 10853 10816 10855 5126649 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5127357 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127357 5123602 10378 10379 Yes Security Update 6.2.9200.26426 https://support.microsoft.com/help/5127357 10378 10379 5127357 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127356 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127356 5123499 10483 10543 Yes Security Update 6.3.9600.23457 https://support.microsoft.com/help/5127356 10483 10543 5127356 yhw Anonymous TunSk &amp; Zhiniang Peng 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Information Disclosure Vulnerability <p>Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.</p> Windows NTFS Microsoft Yes CVE-2026-83864 Authentication Bypass by Spoofing 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21946 21945 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 21946 Information Disclosure 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Internet (wininet.dll) Tampering Vulnerability <p>Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Internet (wininet.dll) Microsoft Yes CVE-2026-83865 Relative Path Traversal 21946 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Tampering 21946 Tampering 21945 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Tampering 10852 Tampering 10853 Tampering 10816 Tampering 10855 Tampering 10378 Tampering 10379 Tampering 10483 Tampering 10543 Important 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 21945 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Win32K Microsoft Yes CVE-2026-83866 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Push Notifications Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Push Notifications Microsoft Yes CVE-2026-83867 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Bluetooth Driver Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Bluetooth Driver Microsoft Yes CVE-2026-83868 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> Jianliang Zhao &amp; Zhiniang Peng with HUST, R4nger &amp; mj with Kunlun Lab 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Domain Name Service Remote Code Execution Vulnerability <p>Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Role: DNS Server Microsoft Yes CVE-2026-83869 Integer Underflow (Wrap or Wraparound) 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Aggregated Data Platform Service Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Aggregated Data Platform Service Microsoft Yes CVE-2026-83870 Out-of-bounds Read 20437 20438 12389 12390 20853 20854 21945 21946 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 k0shl using GLM from z.ai (https://z.ai) Lian Owen TunSk &amp; Zhiniang Peng 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> OpenSSH for Windows Microsoft Yes CVE-2026-83871 Heap-based Buffer Overflow Time-of-check Time-of-use (TOCTOU) Race Condition 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows TCP/IP Local Elevation of Privilege Vulnerability <p>Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows TCP/IP Microsoft Yes CVE-2026-83872 Incorrect Conversion between Numeric Types 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://twitter.com/randomdhiraj">Dhiraj Mishra</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Shell Elevation of Privilege Vulnerability <p>Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Shell Microsoft Yes CVE-2026-83873 Relative Path Traversal 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 le0s1mba 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Event Tracing Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Windows Event Tracing Microsoft Yes CVE-2026-83874 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Human Interface Device Information Disclosure Vulnerability <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p> HID Parser Library Microsoft Yes CVE-2026-83875 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Shell Elevation of Privilege Vulnerability <p>Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Shell Microsoft Yes CVE-2026-83876 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Devices Human Interface Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> HID Parser Library Microsoft Yes CVE-2026-83877 Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/heegong123">HeeChan Kim</a> with <a href="https://h4c.team/">TeamH4C</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Overlay Filter Microsoft Yes CVE-2026-83879 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows exFAT File System Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows exFAT File System Microsoft Yes CVE-2026-83881 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-83882 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg &amp; 2st</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-83883 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Human Interface Device Information Disclosure Vulnerability <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p> HID Parser Library Microsoft Yes CVE-2026-83884 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability <p>Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Virtualization-Based Security (VBS) Enclave Microsoft Yes CVE-2026-83885 Inadequate Encryption Strength 11923 11924 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Spoofing 11923 Spoofing 11924 Spoofing 12437 Spoofing 20437 Spoofing 20438 Spoofing 12389 Spoofing 12390 Spoofing 12436 Spoofing 20853 Spoofing 20854 Spoofing 21945 Spoofing 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Orchestrator Service Elevation of Privilege Vulnerability <p>Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Update Orchestrator Service Microsoft Yes CVE-2026-83886 Use After Free 21945 21946 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> mj with Kunlun Lab &amp; Zhiniang Peng with HUST mj with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> HID Parser Library Information Disclosure Vulnerability <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> HID Parser Library Microsoft Yes CVE-2026-83887 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows CD-ROM Driver Elevation of Privilege Vulnerability <p>Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p> Windows CD-ROM Driver Microsoft Yes CVE-2026-83888 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p>Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low-level access to an affected server could send a specially crafted request to execute code on the server. User interaction is not required.</p> Role: DNS Server Microsoft Yes CVE-2026-83889 Release of Invalid Pointer or Reference 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-83891 Stack-based Buffer Overflow Improper Input Validation 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 namnp with <a href="https://x.com/vcslab">Viettel Cyber Security</a> vietnq 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Human Interface Device Information Disclosure Vulnerability <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p> HID Parser Library Microsoft Yes CVE-2026-83892 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Clipboard User Service Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.</p> Windows Clipboard User Service Microsoft Yes CVE-2026-83893 Exposure of Sensitive System Information to an Unauthorized Control Sphere 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-83895 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Direct Composition Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Direct Composition Microsoft Yes CVE-2026-83896 Heap-based Buffer Overflow 21946 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 21945 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-83897 Exposure of Sensitive System Information to an Unauthorized Control Sphere 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> HID Parser Library Information Disclosure Vulnerability <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> HID Parser Library Microsoft Yes CVE-2026-83898 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-83899 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Bind Filter Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Bind Filter Driver Microsoft Yes CVE-2026-83900 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Naveen Singh James Zhong 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-83901 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Direct Composition Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Direct Composition Microsoft Yes CVE-2026-83902 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; npc0vo</a> with https://diffract-ai.com/ Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Direct Composition Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Direct Composition Microsoft Yes CVE-2026-83903 Heap-based Buffer Overflow 21945 21946 12437 20437 20438 12389 12390 12436 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> HID Parser Library Information Disclosure Vulnerability <p>Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> HID Parser Library Microsoft Yes CVE-2026-83904 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Shell Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Shell Microsoft Yes CVE-2026-83905 Exposure of Sensitive System Information to an Unauthorized Control Sphere 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/heegong123">HeeChan Kim</a> with <a href="https://h4c.team/">TeamH4C</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Shell Spoofing Vulnerability <p>Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.</p> Windows Shell Microsoft Yes CVE-2026-83906 Incorrect Implementation of Authentication Algorithm 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Spoofing 12437 Spoofing 20437 Spoofing 20438 Spoofing 12242 Spoofing 12243 Spoofing 12389 Spoofing 12390 Spoofing 12436 Spoofing 20853 Spoofing 20854 Spoofing 21945 Spoofing 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hello Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Hello Microsoft Yes CVE-2026-83907 Exposure of Sensitive System Information to an Unauthorized Control Sphere 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 21946 21945 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21946 Information Disclosure 21945 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 <a href="https://linkedin.com/in/dr-sr">Dan Reynolds</a> with MSRC Vulnerabilities &amp; Mitigations 1.0 2026-10-13T07:00:00 <p>Information published.</p> RPC Runtime Elevation of Privilege Vulnerability <p>Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> RPC Runtime Microsoft Yes CVE-2026-83908 Release of Invalid Pointer or Reference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-83909 Exposure of Sensitive System Information to an Unauthorized Control Sphere 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> RPC Runtime Library Remote Code Execution Vulnerability <p>Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> RPC Runtime Microsoft Yes CVE-2026-83910 Out-of-bounds Write 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Storage Microsoft Yes CVE-2026-83911 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-11-02T08:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Direct Composition Elevation of Privilege Vulnerability <p>Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Direct Composition Microsoft Yes CVE-2026-83912 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-83913 Use After Free 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 21945 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft XML Remote Code Execution Vulnerability <p>Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Microsoft XML Microsoft Yes CVE-2026-83914 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Diagnostic Policy Service Elevation of Privilege Vulnerability <p>Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Diagnostic Policy Service Microsoft Yes CVE-2026-83915 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/byunghyun10211">Byunghyun Kang</a> with KAIST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Remote Code Execution Vulnerability <p>Double free in Windows Error Reporting allows an authorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Error Reporting Microsoft Yes CVE-2026-83916 Double Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows ALPC Elevation of Privilege Vulnerability <p>Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows ALPC Microsoft Yes CVE-2026-83917 Use After Free 21945 21946 12436 12437 20854 20853 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 12389 12390 20437 20438 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 <a href="https://linkedin.com/in/dr-sr">Dan Reynolds</a> with MSRC Vulnerabilities &amp; Mitigations 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-83918 Integer Overflow or Wraparound 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Yun Cong 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Internet Messaging API Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.</p> Microsoft Internet Messaging API Microsoft Yes CVE-2026-83919 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Search Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-83920 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Search Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-83921 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Vamshi Krishna Bolly 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Direct Composition Elevation of Privilege Vulnerability <p>Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Direct Composition Microsoft Yes CVE-2026-83922 Use After Free 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 21945 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft OpenSSH for Windows Remote Code Execution Vulnerability <p>Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> OpenSSH for Windows Microsoft Yes CVE-2026-83923 Relative Path Traversal 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://in.linkedin.com/in/thesecguy">Owais Lone</a> sux_auto 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kernel Microsoft Yes CVE-2026-83924 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unintentional read access from uninitialized memory, which can be from either kernel memory or another user-mode process.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kernel Microsoft Yes CVE-2026-83925 Use of Uninitialized Resource Exposure of Sensitive System Information to an Unauthorized Control Sphere 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hello Security Feature Bypass Vulnerability <p>Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>This vulnerability could allow an attacker to bypass the Windows biometric authentication feature. A malicious biometric device could be incorrectly recognized as trusted, allowing an attacker to falsely present biometric data and potentially gain access to the device without the legitimate user's fingerprint or face.</p> Windows Hello Microsoft Yes CVE-2026-83926 Improper Certificate Validation 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 21945 Security Feature Bypass 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://linkedin.com/in/dr-sr">Dan Reynolds</a> with MSRC Vulnerabilities &amp; Mitigations Xiaobye(@xiaobye_tw) of DEVCORE Research Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Registry Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Registry Microsoft Yes CVE-2026-83927 Improper Link Resolution Before File Access ('Link Following') 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 21945 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Landon Peng (lunbun) with Lunbun LLC <a href="https://github.com/mallo-m">Mallory Mousson</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability <p>Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system.</p> Windows Local Security Authority Subsystem Service (LSASS) Microsoft Yes CVE-2026-83928 Missing Authentication for Critical Function 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows GDI Remote Code Execution Vulnerability <p>Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Windows GDI Microsoft Yes CVE-2026-83929 Out-of-bounds Write 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Orchestrator Service Elevation of Privilege Vulnerability <p>Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Update Orchestrator Service Microsoft Yes CVE-2026-83930 Use After Free 21945 21946 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 OOOooooooOOO GraVity0 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Hyper-V Microsoft Yes CVE-2026-83931 Heap-based Buffer Overflow 21945 21946 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Artur Stetsko Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Group Policy Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Group Policy Microsoft Yes CVE-2026-83932 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://twitter.com/4zure9">Azure Yang</a> with <a href="http://www.cyberkl.com/">Kunlun Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Orchestrator Service Information Disclosure Vulnerability <p>Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.</p> Windows Update Orchestrator Service Microsoft Yes CVE-2026-83933 Improper Link Resolution Before File Access ('Link Following') 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Harkenzo 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows GDI+ Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Windows GDI+ Microsoft Yes CVE-2026-83934 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 21945 Critical 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft XML Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Microsoft XML Microsoft Yes CVE-2026-83935 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Kubernetes Configuration Service Microsoft No CVE-2026-83938 Missing Authentication for Critical Function 22140 Elevation of Privilege 22140 Critical 22140 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 10.0 8.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 22140 Yuval Weber with Microsoft 1.0 2026-10-22T07:00:00 <p>Information published.</p> Azure API Center Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure API Center Microsoft No CVE-2026-83943 Exposure of Sensitive Information to an Unauthorized Actor 21978 Information Disclosure 21978 Critical 21978 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.7 7.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 21978 <a href="https://www.linkedin.com/in/asaf-cohen-4103b75b/">Asaf Cohen</a> with <a href="https://xbreach.ai/">XBREACH.AI</a> 1.0 2026-10-08T07:00:00 <p>Information published.</p> 1.1 2026-10-14T07:00:00 <p>CWE added. Informational change only.</p> Microsoft SQL Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> SQL Server Microsoft Yes CVE-2026-83945 Heap-based Buffer Overflow 20748 12147 22009 22010 Remote Code Execution 20748 Remote Code Execution 12147 Remote Code Execution 22009 Remote Code Execution 22010 Important 20748 Important 12147 Important 22009 Important 22010 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Azure Event Grid Spoofing Vulnerability <p>Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Event Grid Microsoft No CVE-2026-83947 Missing Authorization 20510 Spoofing 20510 Critical 20510 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N/E:U/RL:O/RC:C 20510 <a href="https://www.linkedin.com/in/asaf-cohen-4103b75b/">Asaf Cohen</a> with <a href="https://xbreach.ai/">XBREACH.AI</a> 1.0 2026-10-08T07:00:00 <p>Information published.</p> Remote Desktop Gateway Service Information Disclosure Vulnerability <p>Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Remote Desktop Gateway Service Microsoft Yes CVE-2026-84007 Out-of-bounds Read 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/m4x_1997">Aobo Wang</a> k0shl using GLM from z.ai (https://z.ai) 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> .NET Denial of Service Vulnerability <p>Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.</p> .NET Microsoft Yes CVE-2026-84008 Inefficient Algorithmic Complexity 21961-20837 21961-20839 21961-20838 21961-21783 21961-21785 21961-21784 21961-12414 21961-12415 21961-12416 21961-12434 21961-12432 21961-12433 21956 16767 11723-11571 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 Denial of Service 21961-20837 Denial of Service 21961-20839 Denial of Service 21961-20838 Denial of Service 21961-21783 Denial of Service 21961-21785 Denial of Service 21961-21784 Denial of Service 21961-12414 Denial of Service 21961-12415 Denial of Service 21961-12416 Denial of Service 21961-12434 Denial of Service 21961-12432 Denial of Service 21961-12433 Denial of Service 21956 Denial of Service 16767 Denial of Service 11723-11571 Denial of Service 2472-21987 Denial of Service 2472-10378 Denial of Service 2472-10483 Denial of Service 11723-22028 Denial of Service 11723-10816 Denial of Service 11677-22029 Denial of Service 11676-22029 Denial of Service 11676-21983 Denial of Service 11676-21984 Denial of Service 11676-11571 Denial of Service 11676-11923 Denial of Service 11863-10378 Denial of Service 11863-10483 Denial of Service 11650-22028 Denial of Service 11650-10378 Denial of Service 11650-10483 Denial of Service 11650-10816 Denial of Service 12079-21983 Denial of Service 12079-21984 Denial of Service 12079-21985 Denial of Service 12079-21986 Denial of Service 12079-12436 Denial of Service 12078-21987 Denial of Service 12079-21988 Denial of Service 12079-11923 Denial of Service 12079-21989 Important 21961-20837 Important 21961-20839 Important 21961-20838 Important 21961-21783 Important 21961-21785 Important 21961-21784 Important 21961-12414 Important 21961-12415 Important 21961-12416 Important 21961-12434 Important 21961-12432 Important 21961-12433 Important 21956 Important 16767 Important 11723-11571 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-20837 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-21783 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-21785 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-21784 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21961-12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21956 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21985 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21986 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21988 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21989 Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Pkcs 21961-20837 21961-20839 21961-20838 Security Update 10.0.13 https://github.com/dotnet/announcements/issues/468 21961-20837 21961-20839 21961-20838 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Pkcs 21961-21783 21961-21785 21961-21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/468 21961-21783 21961-21785 21961-21784 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Pkcs 21961-12414 21961-12415 21961-12416 Security Update 8.0.2 https://github.com/dotnet/announcements/issues/468 21961-12414 21961-12415 21961-12416 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Pkcs 21961-12434 21961-12432 21961-12433 Security Update 9.0.21 https://github.com/dotnet/announcements/issues/468 21961-12434 21961-12432 21961-12433 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 <a href="https://x.com/soaj1664ashar">Dr.-Ing Ashar Javed</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Projected File System Tampering Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Projected File System Microsoft Yes CVE-2026-84009 Time-of-check Time-of-use (TOCTOU) Race Condition 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Tampering 21945 Tampering 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Pham Quang Minh 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows SMB Client Security Feature Bypass Vulnerability <p>Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>Successfully exploiting this vulnerability could allow an attacker to bypass network security protections that rely on Fully Qualified Domain Name (FQDN)‑based rules, such as policies that block or allow network connections based on domain names. This could reduce the effectiveness of security features that depend on those domain‑based network controls.</p> Windows SMB Client Microsoft Yes CVE-2026-84011 Incorrect Authorization 21945 21946 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Remote Desktop Services Remote Code Execution Vulnerability <p>Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Remote Desktop Gateway Service Microsoft Yes CVE-2026-84012 Double Free 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Telephony Server Elevation of Privilege Vulnerability <p>Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Telephony Server Microsoft Yes CVE-2026-84013 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Vinay Karnam pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Device Association Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Device Association Service Microsoft Yes CVE-2026-84014 Heap-based Buffer Overflow Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Lucia Adams with MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Remote Access Point-to-Point Protocol (PPP) EAP-TLS Microsoft Yes CVE-2026-84015 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 ʌ!ɔ⊥ojv 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows EAPHost Service Elevation of Privilege Vulnerability <p>Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows EAPHost Service Microsoft Yes CVE-2026-84016 Out-of-bounds Write 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 ʌ!ɔ⊥ojv 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability <p>Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-84017 NULL Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 21945 Denial of Service 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Print Spooler Components Elevation of Privilege Vulnerability <p>Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Print Spooler Components Microsoft Yes CVE-2026-84018 Use After Free Time-of-check Time-of-use (TOCTOU) Race Condition 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability <p>Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Advanced Rasterization Platform Microsoft Yes CVE-2026-84019 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.1 2026-10-14T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability <p>Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-84020 Use After Free 21945 21946 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://twitter.com/keyz3r0">k0shl</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Servicing Stack Updates Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Servicing Stack Updates Microsoft Yes CVE-2026-85318 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-85319 Allocation of Resources Without Limits or Throttling 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Print Spooler Components Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows Print Spooler Components Microsoft Yes CVE-2026-85320 Use of Uninitialized Resource 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 sweetchip Daejin Lee 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-85321 Allocation of Resources Without Limits or Throttling 11571 11572 11923 11924 12437 12436 10816 10855 10483 10543 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10816 Denial of Service 10855 Denial of Service 10483 Denial of Service 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-85322 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Network Device Enrollment Service (NDES) Spoofing Vulnerability <p>Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Network Device Enrollment Service (NDES) Microsoft Yes CVE-2026-85323 Weak Authentication 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 12437 Spoofing 12436 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11924 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10378 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10379 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Denial of Service Vulnerability <p>Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-85324 Memory Allocation with Excessive Size Value 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Print Spooler Components Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Print Spooler Components Microsoft Yes CVE-2026-85327 Heap-based Buffer Overflow 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 20437 20438 12389 12390 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 P1hcn haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Projected File System Elevation of Privilege Vulnerability <p>Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Projected File System Microsoft Yes CVE-2026-85328 Weak Authentication 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Account Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Account Microsoft Yes CVE-2026-85329 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Edge for Android Security Feature Bypass Vulnerability <p>Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could smuggle another HTTP request and bypass front-end security controls or hijack other users' credentials.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to no loss of confidentiality (C:N) and integrity (I:N), but could lead to some loss of availability (A:L). What does that mean for this vulnerability?</strong></p> <p>An attacker using either a specially-crafted page or a content script injected into a target page can show an extension's popup over a permission prompt or screen share dialog allowing the extension to spoof parts of the prompt's UI that shows its origin.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user would have to click on a specially crafted URL to be compromised by the attacker, and navigate to a malicious site where malicious code would execute a series of specially crafted queries.</p> Microsoft Edge for Android Microsoft Yes CVE-2026-85330 Incorrect Authorization 21955 Security Feature Bypass 21955 Moderate 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 155.0.4283.45 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes <a href="https://www.linkedin.com/in/artha-suratinoyo-91212a320/">Artha Suratinoyo</a> 1.0 2026-10-26T07:00:00 <p>Information published.</p> Windows Device Association Service Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Device Association Service Microsoft Yes CVE-2026-85331 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Device Association Service Elevation of Privilege Vulnerability <p>Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Device Association Service Microsoft Yes CVE-2026-85332 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Performance Monitor Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Performance Monitor Microsoft Yes CVE-2026-85333 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 10378 10379 10483 10543 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 20854 20853 10852 12437 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10852 Elevation of Privilege 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 20854 Important 20853 Important 10852 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Message Queuing Queue Manager Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows Message Queuing Queue Manager Microsoft Yes CVE-2026-85334 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Device Association Service Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Device Association Service Microsoft Yes CVE-2026-85336 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; npc0vo</a> with https://diffract-ai.com/ haowei yan LC with VGCO - Future Labs 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Remote Desktop Client Information Disclosure Vulnerability <p>Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Remote Desktop Client Microsoft Yes CVE-2026-85337 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Graphics Component Elevation of Privilege Vulnerability <p>Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Graphics Component Microsoft Yes CVE-2026-85338 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://twitter.com/crispr_x">BochengXiang(@Crispr)</a> with FDU 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability <p>Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-85339 Integer Underflow (Wrap or Wraparound) Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Click-To-Run Elevation of Privilege Vulnerability <p>Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Office Click-To-Run Microsoft Yes CVE-2026-85340 Use After Free 11952 11953 12421 12420 11763 11762 Elevation of Privilege 11952 Elevation of Privilege 11953 Elevation of Privilege 12421 Elevation of Privilege 12420 Elevation of Privilege 11763 Elevation of Privilege 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows USB Video Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Video Driver Microsoft Yes CVE-2026-85341 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Thanatos Tian (HKPolyU) &amp; wgg 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Device Association Service Elevation of Privilege Vulnerability <p>Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Device Association Service Microsoft Yes CVE-2026-85342 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Hyper-V Microsoft Yes CVE-2026-85343 Improper Link Resolution Before File Access ('Link Following') 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Device Association Service Elevation of Privilege Vulnerability <p>Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Device Association Service Microsoft Yes CVE-2026-85352 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Print Spooler Components Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Print Spooler Components Microsoft Yes CVE-2026-85353 Out-of-bounds Read 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 Information Disclosure 21945 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 20437 20438 12389 12390 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous Thanatos Tian (HKPolyU) &amp; npc0vo 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Elevation of Privilege Vulnerability <p>Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Error Reporting Microsoft Yes CVE-2026-85354 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Common Log File System Driver Elevation of Privilege Vulnerability <p>Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Common Log File System Driver Microsoft Yes CVE-2026-85355 Inclusion of Functionality from Untrusted Control Sphere 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero & Zhiniang Peng 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-28T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Volume Manager Extension Driver Microsoft Yes CVE-2026-85356 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Phone Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Phone Service Microsoft Yes CVE-2026-85357 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 21945 21946 11923 11924 20437 20438 12242 12243 12389 12390 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> <a href="https://z.ai/">Yuki Chen using GLM from z.ai</a> pwn2addr 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-85358 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Performance Monitor Elevation of Privilege Vulnerability <p>Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Performance Monitor Microsoft Yes CVE-2026-85359 Improper Control of Generation of Code ('Code Injection') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-85361 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Management Instrumentation Elevation of Privilege Vulnerability <p>Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Management Instrumentation Microsoft Yes CVE-2026-85362 Release of Invalid Pointer or Reference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Framework Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> .NET Framework Microsoft Yes CVE-2026-85363 Integer Overflow or Wraparound 21956 16767 20837 12434 12414 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 21783 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 Elevation of Privilege 21956 Elevation of Privilege 16767 Elevation of Privilege 20837 Elevation of Privilege 12434 Elevation of Privilege 12414 Elevation of Privilege 12079-21983 Elevation of Privilege 12079-21984 Elevation of Privilege 12079-21985 Elevation of Privilege 12079-21986 Elevation of Privilege 12079-12436 Elevation of Privilege 12078-21987 Elevation of Privilege 12079-21988 Elevation of Privilege 12079-11923 Elevation of Privilege 12079-21989 Elevation of Privilege 21783 Elevation of Privilege 2472-21987 Elevation of Privilege 2472-10378 Elevation of Privilege 2472-10483 Elevation of Privilege 11723-22028 Elevation of Privilege 11723-10816 Elevation of Privilege 11723-11571 Elevation of Privilege 11677-22029 Elevation of Privilege 11676-22029 Elevation of Privilege 11676-21983 Elevation of Privilege 11676-21984 Elevation of Privilege 11676-11571 Elevation of Privilege 11676-11923 Elevation of Privilege 11863-10378 Elevation of Privilege 11863-10483 Elevation of Privilege 11650-22028 Elevation of Privilege 11650-10378 Elevation of Privilege 11650-10483 Elevation of Privilege 11650-10816 Important 21956 Important 16767 Important 20837 Important 12434 Important 12414 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Important 21783 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21985 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21986 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21988 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21989 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 5130036 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/469 21783 Release Notes 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 <a href="https://x.com/ky0tofu">Ky0toFu</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-85364 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Servicing Stack Updates Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Servicing Stack Updates Microsoft Yes CVE-2026-85365 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-85366 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous AIフィジカルインターフェイス二号機 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability <p>Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Cash Drawer Protocol Provider Microsoft Yes CVE-2026-85367 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows TCP/IP Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows TCP/IP Microsoft Yes CVE-2026-85368 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> byzero, mj with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-28T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Hyper-V Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>To exploit this vulnerability, an attacker could run a specially crafted application on a Hyper-V guest that could cause the Hyper-V host operating system to execute arbitrary code when it fails to properly validate vSMB packet data.</p> Windows Hyper-V Microsoft Yes CVE-2026-85369 Out-of-bounds Read 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> WebDAV Elevation of Privilege Vulnerability <p>Use after free in WebDAV allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could create or delete files in the security context of the “NT AUTHORITY\ LOCAL SERVICE” account.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> WebDAV Microsoft Yes CVE-2026-85370 Use After Free 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 20437 20438 12389 12390 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> insu (@hpy_insu) of Theori, with Xint <a href="https://x.com/hototogisutian">Thanatos Tian (HKPolyU) &amp; npc0vo &amp; 2st</a> with https://diffract-ai.com/ 0AF3B0CB6FEFDED70267D4510DF654D8 mj with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Network Policy Server (NPS) Remote Code Execution Vulnerability <p>Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Network Policy Server (NPS) Microsoft Yes CVE-2026-85371 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kernel Microsoft Yes CVE-2026-85372 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract <a href="https://www.linkedin.com/in/divyasundar16">Divya Sundar</a> with Microsoft- MSRC V&amp;M <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Plug and Play (UPnP) Device Host Microsoft Yes CVE-2026-85373 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 wxz Killer Queen 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Installer Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Installer Microsoft Yes CVE-2026-85374 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability <p>Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Plug and Play (UPnP) Device Host Microsoft Yes CVE-2026-85375 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Print Spooler Components Elevation of Privilege Vulnerability <p>Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> Windows Print Spooler Components Microsoft Yes CVE-2026-85376 Weak Authentication 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows CD-ROM Driver Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows CD-ROM Driver Microsoft Yes CVE-2026-85377 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Linzishan & Anemone & Zhiniang Peng <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft QUIC Information Disclosure Vulnerability <p>Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Microsoft QUIC Microsoft Yes CVE-2026-85790 Use After Free 21945 21946 21956 16767 21960-20837 21960-21783 21960-12414 21960-12434 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 21956 Information Disclosure 16767 Information Disclosure 21960-20837 Information Disclosure 21960-21783 Information Disclosure 21960-12414 Information Disclosure 21960-12434 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 21945 Important 21946 Important 21956 Important 16767 Important 21960-20837 Important 21960-21783 Important 21960-12414 Important 21960-12434 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21956 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 16767 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21960-20837 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21960-21783 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21960-12414 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21960-12434 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.Native.Quic.MsQuic.Schannel 21960-20837 21960-21783 21960-12414 21960-12434 Security Update 2.6.2 https://github.com/dotnet/announcements/issues/470 21960-20837 21960-21783 21960-12414 21960-12434 Release Notes 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 reinusKR reinusKR <a href="https://twitter.com/ezrak1e">Ezrak1e</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.</p> 1.2 2026-10-16T07:00:00 <p>Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Encrypting File System (EFS) Microsoft Yes CVE-2026-85791 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/heegong123">HeeChan Kim</a> with <a href="https://h4c.team/">TeamH4C</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability <p>Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-85792 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Sysmain Service Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows Sysmain Service Microsoft Yes CVE-2026-85793 Exposure of Sensitive System Information to an Unauthorized Control Sphere 11568 11569 11571 11572 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 10852 10853 10816 10855 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 sweetchip Daejin Lee 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-85794 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Text Services Framework Elevation of Privilege Vulnerability <p>Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Text Services Framework Microsoft Yes CVE-2026-85795 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 OSORI with <a href="https://hspace.io/">HSPACE</a> OSORI with <a href="https://hspace.io/">HSPACE</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-85796 Numeric Truncation Error Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows GDI Information Disclosure Vulnerability <p>Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows GDI Microsoft Yes CVE-2026-85797 Out-of-bounds Read Improper Input Validation 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 Information Disclosure 21945 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 20437 20438 12389 12390 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Thanatos Tian (HKPolyU) &amp; npc0vo with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Distributed File System (DFS) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.</p> Windows Distributed File System (DFS) Microsoft Yes CVE-2026-85798 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Pwnforr777 <a href="https://twitter.com/thunderj17">Thunder_J</a> and bee13oy with JD 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Network Policy Server (NPS) Remote Code Execution Vulnerability <p>Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Network Policy Server (NPS) Microsoft Yes CVE-2026-85799 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Error Reporting Microsoft Yes CVE-2026-85800 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-85802 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability <p>Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Camera Frame Server Monitor Microsoft Yes CVE-2026-85803 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-85804 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PowerShell Security Feature Bypass Vulnerability <p>Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass Windows Defender Application Control and PowerShell Constrained Language Mode restrictions, allowing untrusted code to run with capabilities those protections are designed to block.</p> Windows PowerShell Microsoft Yes CVE-2026-85805 Improperly Implemented Security Check for Standard 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Network Policy Server (NPS) Remote Code Execution Vulnerability <p>Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Network Policy Server (NPS) Microsoft Yes CVE-2026-85806 Integer Underflow (Wrap or Wraparound) Stack-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous Sechack 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.2 2026-10-27T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows USB Video Driver Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Video Driver Microsoft Yes CVE-2026-85807 Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability <p>Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-85808 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 21945 Denial of Service 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability <p>Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-85809 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 ʌ!ɔ⊥ojv 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Telephony Server Elevation of Privilege Vulnerability <p>Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Telephony Server Microsoft Yes CVE-2026-85810 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/divyasundar16">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Network Policy Server (NPS) Remote Code Execution Vulnerability <p>Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Network Policy Server (NPS) Microsoft Yes CVE-2026-85811 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Zhiniang Peng with HUST Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Bind Filter Driver Information Disclosure Vulnerability <p>Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The issue could result in exposure of a small amount of internal system data, such as an internal identifier value. The information is limited in scope and does not involve user content or personal data.</p> Windows Bind Filter Driver Microsoft Yes CVE-2026-85812 Files or Directories Accessible to External Parties 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Yongha Lee 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-85814 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan Anonymous <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Device Association Service Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows Device Association Service Microsoft Yes CVE-2026-85815 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; npc0vo</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Wi-Fi Driver Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows Wi-Fi Driver Microsoft Yes CVE-2026-85816 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.7 5.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PowerShell Remote Code Execution Vulnerability <p>Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Windows PowerShell Microsoft Yes CVE-2026-85817 Reliance on Untrusted Inputs in a Security Decision 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Coşkun Bağrıa&#231;ık 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Schannel Spoofing Vulnerability <p>Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>How could an attacker exploit this vulnerability?</strong> An unauthenticated network attacker could establish concurrent resumed TLS connections and exploit a race condition to substitute a trusted client certificate without proving possession of its private key. Successful exploitation could allow the attacker to be authenticated as the certificate's identity. User interaction is not required.</p> Windows Schannel Microsoft Yes CVE-2026-85818 Improper Verification of Cryptographic Signature 21945 21946 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Spoofing 21945 Spoofing 21946 Spoofing 11923 Spoofing 11924 Spoofing 12437 Spoofing 20437 Spoofing 20438 Spoofing 12242 Spoofing 12243 Spoofing 12389 Spoofing 12390 Spoofing 12436 Spoofing 20853 Spoofing 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 mad31k 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-85820 Heap-based Buffer Overflow Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose small portions of uninitialized kernel stack memory.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-85821 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows exFAT File System Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows exFAT File System Microsoft Yes CVE-2026-85822 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Linzishan & Anemone & Zhiniang Peng 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Composite Image File System Elevation of Privilege Vulnerability <p>Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Composite Image File System Microsoft Yes CVE-2026-85823 Use After Free 11923 11924 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Composite Image File System Elevation of Privilege Vulnerability <p>Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Composite Image File System Microsoft Yes CVE-2026-85824 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-85825 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Fast FAT Driver Elevation of Privilege Vulnerability <p>Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Fast FAT Driver Microsoft Yes CVE-2026-85826 Out-of-bounds Write 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> bccc95a61a3cc79d7b2c4423c808f744 1.0 2026-10-13T07:00:00 <p>Information published.</p> WebDAV Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> WebDAV Microsoft Yes CVE-2026-85827 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> WebDAV Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> WebDAV Microsoft Yes CVE-2026-85828 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Wired AutoConfig Service Elevation of Privilege Vulnerability <p>Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Wired AutoConfig Service Microsoft Yes CVE-2026-85829 Double Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 k0shl using GLM from z.ai (https://z.ai) 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows Installer Microsoft Yes CVE-2026-85830 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Biometric Service Information Disclosure Vulnerability <p>Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Biometric Service Microsoft Yes CVE-2026-85831 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 21945 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21946 Information Disclosure 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Background Intelligent Transfer Service (BITS) Microsoft Yes CVE-2026-85832 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability <p>Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Modern Device Management (MDM) Microsoft Yes CVE-2026-85833 Use After Free 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows TCP/IP Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows TCP/IP Microsoft Yes CVE-2026-85834 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/m4x_1997">Aobo Wang</a> yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Servicing Stack Updates Information Disclosure Vulnerability <p>Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Servicing Stack Updates Microsoft Yes CVE-2026-85835 Buffer Over-read 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-85836 Use After Free 21945 21946 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-85837 Out-of-bounds Read 21945 21946 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://x.com/heegong123">HeeChan Kim</a> with <a href="https://h4c.team/">TeamH4C</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Event Viewer Information Disclosure Vulnerability <p>Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.</p> Windows Event Viewer Microsoft Yes CVE-2026-85840 Files or Directories Accessible to External Parties 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/fcripolles/">Francisco Jos&#233; Carot Ripoll&#233;s (RipFran)</a> with <a href="https://www.linkedin.com/company/kpmg-espana/">KPMG Spain</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows DHCP Server Microsoft Yes CVE-2026-85841 Use After Free 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Jay Ladhad 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Image Acquisition Elevation of Privilege Vulnerability <p>Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Image Acquisition Microsoft Yes CVE-2026-85842 Use of Externally-Controlled Format String 21945 21946 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Weifeng Yuan with Huazhong University of Science and Technology 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability <p>Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Background Intelligent Transfer Service (BITS) Microsoft Yes CVE-2026-85843 Use of Uninitialized Resource 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Web Account Manager Elevation of Privilege Vulnerability <p>Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Web Account Manager Microsoft Yes CVE-2026-85846 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Print Spooler Components Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Print Spooler Components Microsoft Yes CVE-2026-85847 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/clearbluejar">John McIntosh (clearbluejar)</a> with <a href="https://clearseclabs.com/">CLEARSECLABS LLC</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Background Intelligent Transfer Service (BITS) Microsoft Yes CVE-2026-85848 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows AppX Deployment Service Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows AppX Deployment Service Microsoft Yes CVE-2026-85849 Improper Link Resolution Before File Access ('Link Following') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 sweetchip 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-85850 Release of Invalid Pointer or Reference 20853 20854 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (@p1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows SmartScreen Elevation of Privilege Vulnerability <p>Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> Windows SmartScreen Microsoft Yes CVE-2026-85851 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Management Instrumentation Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Management Instrumentation Microsoft Yes CVE-2026-85852 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous <a href="https://x.com/hototogisutian">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-85853 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 10852 10853 10816 10855 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST Varun Goel 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows DWM Core Library Microsoft Yes CVE-2026-85854 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-85855 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Internet Connection Sharing (ICS) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Internet Connection Sharing (ICS) Microsoft Yes CVE-2026-85856 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.1 6.2 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel-Mode Drivers Information Disclosure Vulnerability <p>Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2026-85857 Insertion of Sensitive Information into Log File 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-85858 Out-of-bounds Read 21945 21946 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Message Queuing Queue Manager Denial of Service Vulnerability <p>Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.</p> Windows Message Queuing Queue Manager Microsoft Yes CVE-2026-85859 NULL Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 21945 Denial of Service 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://twitter.com/thunderj17">Thunder_J</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability <p>Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Message Queuing Queue Manager Microsoft Yes CVE-2026-85860 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; npc0vo</a> with https://diffract-ai.com/ Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Clipboard User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Clipboard User Service Microsoft Yes CVE-2026-85861 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Clipboard User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> Windows Clipboard User Service Microsoft Yes CVE-2026-85863 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 yhw Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Python Elevation of Privilege Vulnerability <p>Improper privilege management in Python allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> Python Microsoft Yes CVE-2026-85864 Improper Restriction of Names for Files and Other Resources 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Security Feature Bypass Vulnerability <p>Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong> Successful exploitation could bypass DHCPv6 address-assignment validation and cause a server response to omit an address that should be assigned.</p> Windows DHCP Server Microsoft Yes CVE-2026-85865 Authentication Bypass Using an Alternate Path or Channel 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 12437 Security Feature Bypass 12436 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Matthew Franklin 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows ALPC Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows ALPC Microsoft Yes CVE-2026-85866 Exposure of Sensitive System Information to an Unauthorized Control Sphere 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://linkedin.com/in/dr-sr">Dan Reynolds</a> with MSRC Vulnerabilities &amp; Mitigations 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Remote Access Connection Manager Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Access Connection Manager Microsoft Yes CVE-2026-85867 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 3072 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Common Log File System Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Common Log File System Driver Microsoft Yes CVE-2026-85868 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/%EC%83%81%EC%97%B0-%EC%95%88-235314387" >4hnov</a> <a href="https://github.com/jiy2745">step_jo</a> ZeroBig2738 <a href="https://github.com/jhlee0507">r3con</a> <a href="https://github.com/developer-commit">developer-commit</a> <a href="https://hw4yeon.github.io/">hw4yeon</a> 1.1 2026-10-14T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.2 2026-10-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-85869 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Yun Cong 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Common Log File System Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Common Log File System Driver Microsoft Yes CVE-2026-85870 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/%EC%83%81%EC%97%B0-%EC%95%88-235314387" >4hnov</a> <a href="https://github.com/developer-commit">developer-commit</a> <a href="https://github.com/jhlee0507">r3con</a> <a href="https://hw4yeon.github.io/">hw4yeon</a> ZeroBig27380 <a href="https://github.com/jiy2745">step_jo</a> j_any0 1.1 2026-10-14T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.2 2026-10-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2026-85871 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage VSP Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>In this case, a successful attack could be performed from a low privilege Hyper-V guest. The attacker could traverse the guest's security boundary to gain access to the Hyper-V host environment.</p> Windows Storage VSP Driver Microsoft Yes CVE-2026-85872 Use After Free 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 20437 20438 12389 12390 21945 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> <a href="https://www.linkedin.com/in/cory-rondorf-41788b209/">Cory Rondorf</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Skype for Business Elevation of Privilege Vulnerability <p>Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An authenticated attacker could manipulate a download request sent to an affected Skype for Business server to read the contents of arbitrary files on the system. Successful exploitation could disclose the contents of sensitive files.</p> Skype for Business and Microsoft Lync Microsoft Yes CVE-2026-85873 Authorization Bypass Through User-Controlled Key 21729 21728 12224 Elevation of Privilege 21729 Elevation of Privilege 21728 Elevation of Privilege 12224 Important 21729 Important 21728 Important 12224 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21729 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21728 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12224 5131692 https://www.microsoft.com/en-us/download/details.aspx?id=108874 21729 No Security Update 7.0.2046.889 https://support.microsoft.com/help/5131692 21729 5131692 5131693 21728 No Security Update 7.0.2046.583 https://support.microsoft.com/help/5131693 21728 5131693 5132779 12224 No Security Update 6.0.9319.886 https://support.microsoft.com/help/5132779 12224 5132779 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Message Queuing Queue Manager Remote Code Execution Vulnerability <p>Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.</p> Windows Message Queuing Queue Manager Microsoft Yes CVE-2026-85874 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Elevation of Privilege Vulnerability <p>Use after free in SQL Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> SQL Server Microsoft Yes CVE-2026-85876 Use After Free 11821 22008 20748 22009 22010 12147 Elevation of Privilege 11821 Elevation of Privilege 22008 Elevation of Privilege 20748 Elevation of Privilege 22009 Elevation of Privilege 22010 Elevation of Privilege 12147 Important 11821 Important 22008 Important 20748 Important 22009 Important 22010 Important 12147 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Subsystem for Linux Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Subsystem for Linux Microsoft Yes CVE-2026-85879 Time-of-check Time-of-use (TOCTOU) Race Condition 12069 Elevation of Privilege 12069 Important 12069 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12069 Release Notes https://github.com/microsoft/WSL/releases/tag/2.7.10 12069 No Security Update 2.7.10 https://github.com/microsoft/WSL/releases/tag/2.7.10 12069 Release Notes vurmusum vurmusum <a href="https://www.linkedin.com/in/gikaku/">HE WEI（ギカク）</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Graphics Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could execute code in the kernel.</p> Microsoft Graphics Component Microsoft Yes CVE-2026-85881 Stack-based Buffer Overflow 12155 Elevation of Privilege 12155 Important 12155 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12155 Release Notes https://support.microsoft.com/en-us/microsoft-365 12155 Security Update 16.0.20430.20000 https://support.microsoft.com/en-us/microsoft-365 12155 Release Notes esakis 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Health and Optimized Experiences Service Microsoft Yes CVE-2026-85884 Missing Authentication for Critical Function 20437 20438 12389 12390 20853 20854 21945 21946 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 [h4urek](https://x.com/h4urek) and [Bocheng Xiang](https://x.com/crispr_x) with secsys lab https://secsys.fudan.edu.cn/ shoodagiri with <a href="https://gmo-cybersecurity.com/">GMO Cybersecurity by Ierae Inc</a> sweetchip Daejin Lee <a href="https://www.linkedin.com/in/will-burns89/">Will Burns </a> with <a href="https://stellar.tech/"> Stellar Technologies Security Research</a> <a href="https://www.linkedin.com/in/wwjohnson/">Wayne Johnson</a> with <a href="https://stellar.tech/">Stellar Technologies, LLC</a> <a href="https://www.linkedin.com/in/matthew-hetelson/">Matt Hetelson</a> <a href="https://www.linkedin.com/in/alexhagenah/">Alexander Hagenah (@xaitax)</a> [h4urek](https://x.com/h4urek) and [Bocheng Xiang](https://x.com/crispr_x) with secsys lab https://secsys.fudan.edu.cn/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by connecting to an affected SQL Server and submitting a specially crafted query or request that triggers a memory corruption condition, allowing the attacker to execute code on the server. Authentication is required; user interaction is not required.</p> SQL Server Microsoft Yes CVE-2026-85886 Heap-based Buffer Overflow 22007 20748 11478 11821 22009 22010 12147 22008 Remote Code Execution 22007 Remote Code Execution 20748 Remote Code Execution 11478 Remote Code Execution 11821 Remote Code Execution 22009 Remote Code Execution 22010 Remote Code Execution 12147 Remote Code Execution 22008 Important 22007 Important 20748 Important 11478 Important 11821 Important 22009 Important 22010 Important 12147 Important 22008 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 5128496 https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b 5122774 22007 Yes Security Update 14.0.3560.2 https://support.microsoft.com/help/5128496 22007 5128496 5128496 https://support.microsoft.com/help/5128496 22007 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128497 https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b 5122775 11478 Yes Security Update 14.0.2140.2 https://support.microsoft.com/help/5128497 11478 5128497 5128497 https://support.microsoft.com/help/5128497 11478 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Information Disclosure Vulnerability <p>Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> SQL Server Microsoft Yes CVE-2026-85888 Out-of-bounds Read 11478 11821 12147 22007 20748 22008 22009 22010 Information Disclosure 11478 Information Disclosure 11821 Information Disclosure 12147 Information Disclosure 22007 Information Disclosure 20748 Information Disclosure 22008 Information Disclosure 22009 Information Disclosure 22010 Important 11478 Important 11821 Important 12147 Important 22007 Important 20748 Important 22008 Important 22009 Important 22010 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11478 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11821 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12147 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20748 5128497 https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b 5122775 11478 Yes Security Update 14.0.2140.2 https://support.microsoft.com/help/5128497 11478 5128497 5128497 https://support.microsoft.com/help/5128497 11478 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5128496 https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b 5122774 22007 Yes Security Update 14.0.3560.2 https://support.microsoft.com/help/5128496 22007 5128496 5128496 https://support.microsoft.com/help/5128496 22007 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 Microsoft Red Team Dawnflare 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-85890 Double Free 21955 Remote Code Execution 21955 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 154.0.4258.37 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13) and Ziling Chen</a> molgryn (Dongju Kim) Anonymous 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-26T07:00:00 <p>Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.</p> Azure HDInsight Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p> Azure HDInsight Microsoft Yes CVE-2026-85891 Exposure of Sensitive Information to an Unauthorized Actor 11987 Information Disclosure 11987 Important 11987 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11987 Release Notes https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-hadoop-provision-linux-clusters 11987 Yes Security Update 2606012120 https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-release-notes 11987 Release Notes Shiva with Microsoft Shiva with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-85897 Heap-based Buffer Overflow 21955 Remote Code Execution 21955 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 154.0.4258.37 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13) and Ziling Chen</a> 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-26T07:00:00 <p>Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could host a specially crafted webpage and convince a user to visit it using an affected version of Microsoft Edge. Successful exploitation could allow the attacker to execute code within the browser renderer process. User interaction is required.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-85898 Access of Resource Using Incompatible Type ('Type Confusion') 11655 22251 Remote Code Execution 11655 Remote Code Execution 22251 Important 11655 Important 22251 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 22251 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 11655 No Security Update 154.0.4258.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 22251 Security Update 154.0.4258.48 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 22251 Release Notes <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13) and Ziling Chen</a> 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-26T07:00:00 <p>Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p>Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained (&quot;sandboxed&quot;) execution environment to a Medium Integrity Level or a High Integrity Level.</p> <p>Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-85899 Use After Free 21955 Elevation of Privilege 21955 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 155.0.4283.45 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13) and Ziling Chen</a> 0AF3B0CB6FEFDED70267D4510DF654D8 pwn2addr 1.0 2026-10-26T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker, who has a minimum of Site Member permissions (PR:L), could execute code remotely on the SharePoint Server.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-85900 Deserialization of Untrusted Data 11961 Remote Code Execution 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Graphics Component Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K - GRFX Microsoft Yes CVE-2026-85901 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Direct Composition Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Direct Composition Microsoft Yes CVE-2026-85902 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Domain Name Service Remote Code Execution Vulnerability <p>Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.</p> Role: DNS Server Microsoft Yes CVE-2026-85903 Untrusted Pointer Dereference 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Device Association Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Device Association Service Microsoft Yes CVE-2026-85904 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Double Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows UI Immersive Server API Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>In this case, a successful attack could cross a session boundary. A component that runs with elevated launch permissions could be activated from a different interactive session than the one it normally runs in, such as in a multi-user or Remote Desktop Services (RDS) deployment, allowing an attacker in one session to affect resources belonging to another user's session.</p> Windows UI Immersive Server Microsoft Yes CVE-2026-85905 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Direct Composition Elevation of Privilege Vulnerability <p>Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Direct Composition Microsoft Yes CVE-2026-85906 Use After Free 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21946 21945 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Graphics Component Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K - GRFX Microsoft Yes CVE-2026-85908 Heap-based Buffer Overflow Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 12155 11951 12440 21368 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Remote Code Execution 12155 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Important 12155 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12155 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Release Notes https://support.microsoft.com/en-us/microsoft-365 12155 Security Update 16.0.20430.20000 https://support.microsoft.com/en-us/microsoft-365 12155 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-85909 Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/heegong123">HeeChan Kim</a> with <a href="https://x.com/heegong123">TeamH4C</a> <a href="https://x.com/tinysecex">tinysec</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows StateRepository API Information Disclosure Vulnerability <p>Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows StateRepository API Microsoft Yes CVE-2026-85910 Buffer Over-read 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://twitter.com/crispr_x">BochengXiang(@Crispr)</a> with FDU 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows StateRepository API Elevation of Privilege Vulnerability <p>Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows StateRepository API Microsoft Yes CVE-2026-85911 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://twitter.com/crispr_x">BochengXiang(@Crispr)</a> with FDU OOOooooooOOO GraVity0 Sechack 1.0 2026-10-13T07:00:00 <p>Information published.</p> Clipboard User Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Clipboard User Service Microsoft Yes CVE-2026-85912 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Embedded Mode Service Elevation of Privilege Vulnerability <p>Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Embedded Mode Service Microsoft Yes CVE-2026-85914 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 pwn2addr Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows PCI Bus Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows PCI Bus Driver Microsoft Yes CVE-2026-85915 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Azure Active Directory Information Disclosure Vulnerability <p>Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>This vulnerability could expose a sign-in access token for a user’s work account. If disclosed, that token could allow access to data and services that the user is authorized to use, potentially including sensitive organizational information.</p> Azure Active Directory Microsoft Yes CVE-2026-85916 Exposure of Private Personal Information to an Unauthorized Actor 21945 21946 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Kai Song Kai Song 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability <p>Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Plug and Play (UPnP) Device Host Microsoft Yes CVE-2026-85918 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://www.linkedin.com/in/byunghyun10211/">Byunghyun Kang</a> with KAIST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> SQL Server Microsoft Yes CVE-2026-85919 Heap-based Buffer Overflow 22009 22010 20748 11821 22008 12147 Elevation of Privilege 22009 Elevation of Privilege 22010 Elevation of Privilege 20748 Elevation of Privilege 11821 Elevation of Privilege 22008 Elevation of Privilege 12147 Important 22009 Important 22010 Important 20748 Important 11821 Important 22008 Important 12147 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows BitLocker Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows BitLocker Microsoft Yes CVE-2026-85920 Time-of-check Time-of-use (TOCTOU) Race Condition 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/jo&#227;o-de-melo-fantini-912390309/">Jo&#227;o de Melo Fantini</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Azure Key Vault Security Feature Bypass Vulnerability <p>Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Exploiting this vulnerability would require an attacker modify the response to take the desired action. An attacker would also have to rely on compromising the principal consuming the SDK, which is beyond attacker's control.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>Successful exploitation could allow an attacker to bypass the challenge-response validation that verifies a Key Vault authentication challenge before it is cached. This could allow a client to send an access token or request data to an untrusted host instead of the intended Key Vault service.</p> Azure Key Vault Microsoft Yes CVE-2026-85922 Weak Authentication 21870 21871 21872 21873 21874 21875 21876 21877 Security Feature Bypass 21870 Security Feature Bypass 21871 Security Feature Bypass 21872 Security Feature Bypass 21873 Security Feature Bypass 21874 Security Feature Bypass 21875 Security Feature Bypass 21876 Security Feature Bypass 21877 Important 21870 Important 21871 Important 21872 Important 21873 Important 21874 Important 21875 Important 21876 Important 21877 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21870 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21871 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21872 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21873 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21874 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21875 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21876 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21877 Release Notes https://pypi.org/project/azure-keyvault-secrets/4.11.2/ 21870 Maybe Security Update 4.11.2 https://github.com/Azure/azure-sdk-for-python/blob/azure-keyvault-secrets_4.11.2/sdk/keyvault/azure-keyvault-secrets/CHANGELOG.md 21870 Release Notes Release Notes https://pypi.org/project/azure-keyvault-keys/4.11.2/ 21871 Maybe Security Update 4.11.2 https://github.com/Azure/azure-sdk-for-python/blob/azure-keyvault-keys_4.11.2/sdk/keyvault/azure-keyvault-keys/CHANGELOG.md 21871 Release Notes Release Notes https://pypi.org/project/azure-keyvault-certificates/4.11.2/ 21872 Maybe Security Update 4.11.2 https://github.com/Azure/azure-sdk-for-python/blob/azure-keyvault-certificates_4.11.2/sdk/keyvault/azure-keyvault-certificates/CHANGELOG.md 21872 Release Notes Release Notes https://pypi.org/project/azure-keyvault-administration/4.7.1/ 21873 Maybe Security Update 4.7.1 https://github.com/Azure/azure-sdk-for-python/blob/azure-keyvault-administration_4.7.1/sdk/keyvault/azure-keyvault-administration/CHANGELOG.md 21873 Release Notes Release Notes https://pypi.org/project/azure-keyvault-securitydomain/1.0.0b3/ 21874 Maybe Security Update 1.0.0b3 https://github.com/Azure/azure-sdk-for-python/blob/azure-keyvault-securitydomain_1.0.0b3/sdk/keyvault/azure-keyvault-securitydomain/CHANGELOG.md 21874 Release Notes Release Notes https://crates.io/crates/azure_security_keyvault_keys/1.0.1 21875 No Security Update 1.0.1 https://github.com/Azure/azure-sdk-for-rust/blob/azure_security_keyvault_keys%401.0.1/sdk/keyvault/azure_security_keyvault_keys/CHANGELOG.md 21875 Release Notes Release Notes https://crates.io/crates/azure_security_keyvault_certificates/1.0.1 21876 No Security Update 1.0.1 https://github.com/Azure/azure-sdk-for-rust/blob/azure_security_keyvault_certificates%401.0.1/sdk/keyvault/azure_security_keyvault_certificates/CHANGELOG.md 21876 Release Notes Release Notes https://crates.io/crates/azure_security_keyvault_secrets/1.0.1 21877 No Security Update 1.0.1 https://github.com/Azure/azure-sdk-for-rust/blob/azure_security_keyvault_secrets%401.0.1/sdk/keyvault/azure_security_keyvault_secrets/CHANGELOG.md 21877 Release Notes <a href="https://www.linkedin.com/in/matteo-mercaldi-644b51228/">Matteo Mercaldi</a> with <a href="https://carrotstudio.it/">CarrotStudio</a> shwoo03 <a href="https://x.com/valzevul">Vadim Drobinin (@valzevul)</a> with <a href="https://drobinin.com/">Drobinin Limited</a> Ron (XBREACH.AI) with <a href="https://xbreach.ai/">XBREACH.AI</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Azure Key Vault Client SDK Elevation of Privilege Vulnerability <p>Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to prepare the target environment to improve exploit reliability.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could obtain and reuse another user's Azure Key Vault access token, allowing unauthorized access to read, modify, or delete secrets and perform cryptographic operations in that user's Key Vault. No user interaction is required.</p> Azure Key Vault Microsoft Yes CVE-2026-85925 Improper Restriction of Communication Channel to Intended Endpoints 21871 21872 21870 21873 Elevation of Privilege 21871 Elevation of Privilege 21872 Elevation of Privilege 21870 Elevation of Privilege 21873 Important 21871 Important 21872 Important 21870 Important 21873 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.2 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 21871 8.2 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 21872 8.2 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 21870 8.2 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 21873 Release Notes https://www.nuget.org/packages/Azure.Security.KeyVault.Keys/4.10.1 21871 No Security Update 4.10.1 https://github.com/Azure/azure-sdk-for-net/blob/Azure.Security.KeyVault.Keys_4.10.1/sdk/keyvault/Azure.Security.KeyVault.Keys/CHANGELOG.md 21871 Release Notes Release Notes https://www.nuget.org/packages/Azure.Security.KeyVault.Certificates/4.9.1 21872 No Security Update 4.9.1 https://github.com/Azure/azure-sdk-for-net/blob/Azure.Security.KeyVault.Certificates_4.9.1/sdk/keyvault/Azure.Security.KeyVault.Certificates/CHANGELOG.md 21872 Release Notes Release Notes https://www.nuget.org/packages/Azure.Security.KeyVault.Secrets/4.11.1 21870 No Security Update 4.11.1 https://github.com/Azure/azure-sdk-for-net/blob/Azure.Security.KeyVault.Secrets_4.11.1/sdk/keyvault/Azure.Security.KeyVault.Secrets/CHANGELOG.md 21870 Release Notes Release Notes https://www.nuget.org/packages/Azure.Security.KeyVault.Administration/4.8.1 21873 No Security Update 4.8.1 https://github.com/Azure/azure-sdk-for-net/blob/Azure.Security.KeyVault.Administration_4.8.1/sdk/keyvault/Azure.Security.KeyVault.Administration/CHANGELOG.md 21873 Release Notes Ron (XBREACH.AI) with <a href="https://xbreach.ai/">XBREACH.AI</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability <p>Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Exploitation requires specific conditions, including particular network configurations and timing conditions, and has only been observed in limited scenarios. This means an attacker cannot reliably exploit the issue in all environments and may need favorable setup or circumstances for it to work.</p> Windows Secure Socket Tunneling Protocol (SSTP) Microsoft Yes CVE-2026-85926 Use After Free 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11569 11571 11572 11568 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11569 11571 11572 11568 5126651 5126651 https://support.microsoft.com/help/5126651 11569 11571 11572 11568 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Plug and Play (UPnP) Device Host Microsoft Yes CVE-2026-85927 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/byunghyun10211">Byunghyun Kang</a> with KAIST 0AF3B0CB6FEFDED70267D4510DF654D8 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Volume Manager Extension Driver Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Volume Manager Extension Driver Microsoft Yes CVE-2026-85928 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Linzishan, Anemone and Zhiniang Peng with HUST haowei yan &amp; xiaozun tang <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Image Acquisition Elevation of Privilege Vulnerability <p>Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Image Acquisition Microsoft Yes CVE-2026-85930 Use After Free 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Distributed File System (DFS) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.</p> Windows Distributed File System (DFS) Microsoft Yes CVE-2026-85931 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Information Disclosure Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-85932 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 11961 Information Disclosure 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Print Spooler Components Elevation of Privilege Vulnerability <p>Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Print Spooler Components Microsoft Yes CVE-2026-85933 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 OOOooooooOOO GraVity0 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows AppX Deployment Service Elevation of Privilege Vulnerability <p>Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows AppX Deployment Service Microsoft Yes CVE-2026-85934 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Dongjun Lee (m0nd2y) with KAIST Hacking Lab LinkedIn: https://www.linkedin.com/in/dongjun-lee-a1505b1b1/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows USB Driver Information Disclosure Vulnerability <p>Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows USB Driver Microsoft Yes CVE-2026-85935 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 pwn2addr Thanatos Tian (HKPolyU) &amp; wgg with Diffract [fanxiaocao](https://x.com/TinySecEx) and [pjf](https://weibo.com/jfpan) 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-28T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Shell Remote Code Execution Vulnerability <p>Double free in Windows Shell allows an unauthorized attacker to execute code over a network.</p> Windows Shell Microsoft Yes CVE-2026-85936 Double Free Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Information Disclosure Vulnerability <p>Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could capture screenshots of another user’s session, crossing the user-session boundary.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-85938 Missing Authorization 21945 21946 11568 11569 11571 11572 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20853 Information Disclosure 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 yhw <a href="https://imap143.com/">Myungyong Lee</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Security Feature Bypass Vulnerability <p>Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>The target environment could be accidentally configured to allow the vulnerability.</p> Windows Kernel Microsoft Yes CVE-2026-85939 Weak Authentication 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 21945 Security Feature Bypass 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-85941 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Reliable Multicast Transport Driver (RMCAST) Microsoft Yes CVE-2026-85943 Time-of-check Time-of-use (TOCTOU) Race Condition Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-85945 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Management Services Elevation of Privilege Vulnerability <p>Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Management Services Microsoft Yes CVE-2026-87691 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p>Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-87692 Deserialization of Untrusted Data 12039 12293 16792 Elevation of Privilege 12039 Elevation of Privilege 12293 Elevation of Privilege 16792 Important 12039 Important 12293 Important 16792 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 5128898 12039 No Security Update 15.01.2507.077 https://support.microsoft.com/help/5128898 12039 5128898 5128897 12293 No Security Update 15.02.1544.050 https://support.microsoft.com/help/5128897 12293 5128897 5128895 https://www.microsoft.com/en-us/download/details.aspx?id=108875 16792 No Security Update 15.02.2562.056 https://support.microsoft.com/help/5128895 16792 5128895 Mert Kuvvet <a href="https://www.linkedin.com/in/marios-gyftos-a6b62122/">MARIOS GYFTOS</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-87693 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-87694 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p>Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-87695 Inclusion of Functionality from Untrusted Control Sphere 16792 12502 12293 12039 Elevation of Privilege 16792 Elevation of Privilege 12502 Elevation of Privilege 12293 Elevation of Privilege 12039 Important 16792 Important 12502 Important 12293 Important 12039 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12502 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 5128895 https://www.microsoft.com/en-us/download/details.aspx?id=108875 16792 No Security Update 15.02.2562.056 https://support.microsoft.com/help/5128895 16792 5128895 5128896 12502 No Security Update 15.02.1748.055 https://support.microsoft.com/help/5128896 12502 5128896 5128897 12293 No Security Update 15.02.1544.050 https://support.microsoft.com/help/5128897 12293 5128897 5128898 12039 No Security Update 15.01.2507.077 https://support.microsoft.com/help/5128898 12039 5128898 <a href="https://www.linkedin.com/in/nguyen-hoang-quoc-an-009863267/">kayiz</a> with <a href="http://lp.com.vn/">Lien Phat Technology Corporation</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p>Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low privileges could poison a shared cache used by the Exchange Control Panel, causing a malicious mail add-in to be installed in the context of another user's mailbox. Successful exploitation could allow the attacker to gain elevated privileges in the affected mailbox context. User interaction is not required.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-87696 Improper Verification of Cryptographic Signature 12502 16792 12293 12039 Elevation of Privilege 12502 Elevation of Privilege 16792 Elevation of Privilege 12293 Elevation of Privilege 12039 Important 12502 Important 16792 Important 12293 Important 12039 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12502 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 5128896 12502 No Security Update 15.02.1748.055 https://support.microsoft.com/help/5128896 12502 5128896 5128895 https://www.microsoft.com/en-us/download/details.aspx?id=108875 16792 No Security Update 15.02.2562.056 https://support.microsoft.com/help/5128895 16792 5128895 5128897 12293 No Security Update 15.02.1544.050 https://support.microsoft.com/help/5128897 12293 5128897 5128898 12039 No Security Update 15.01.2507.077 https://support.microsoft.com/help/5128898 12039 5128898 Lubin with <a href="https://leclancheweb.fr/">LECLANCHE WEB</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Remote Code Execution Vulnerability <p>Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> .NET Microsoft Yes CVE-2026-87697 Deserialization of Untrusted Data 21783 20837 12414 12434 16767 21956 Remote Code Execution 21783 Remote Code Execution 20837 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 16767 Remote Code Execution 21956 Important 21783 Important 20837 Important 12414 Important 12434 Important 16767 Important 21956 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/471 21783 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Yes Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Yes Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Yes Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes 41ae55e9310ff27fa6f26af4727e5590 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Remote Access Service Infrastructure Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Remote Access Service Infrastructure Microsoft Yes CVE-2026-87698 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Winlogon Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Winlogon Microsoft Yes CVE-2026-87699 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/m4x_1997">Aobo Wang</a> <a href="https://twitter.com/4zure9">Azure Yang</a> with <a href="http://www.cyberkl.com/">Kunlun Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-87700 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Resource Management (MRM) Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Resource Management (MRM) Microsoft Yes CVE-2026-87702 Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous <a href="https://x.com/heegong123">HeeChan Kim</a> with <a href="https://h4c.team/">TeamH4C</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-87704 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Security Feature Bypass Vulnerability <p>Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Guest to Guest VM - virtualization security boundary.</p> Windows Hyper-V Microsoft Yes CVE-2026-87705 Improper Verification of Source of a Communication Channel 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Security Feature Bypass 21945 Security Feature Bypass 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 7.4 6.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 PuH4ck3rX 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Spaces Controller Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Spaces Controller Microsoft Yes CVE-2026-87706 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5123065 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123065 5120386 10378 10379 Yes Security Update 6.2.9200.26349 https://support.microsoft.com/help/5123065 10378 10379 5123065 5123066 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123066 5120385 10483 10543 Yes Security Update 6.3.9600.23398 https://support.microsoft.com/help/5123066 10483 10543 5123066 5123099 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123099 5120418 10852 10853 10816 10855 Yes Security Update 10.0.14393.9512 https://support.microsoft.com/help/5123099 10852 10853 10816 10855 5123099 5122876 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876 5120238 11568 11569 11571 11572 Yes Security Update 10.0.17763.9245 https://support.microsoft.com/help/5122876 11568 11569 11571 11572 5122876 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 11929 11930 11931 Yes Security Update 10.0.19044.7725 https://support.microsoft.com/help/5122878 11929 11930 11931 5122878 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 12099 12098 12097 Yes Security Update 10.0.19045.7725 https://support.microsoft.com/help/5122878 12099 12098 12097 5122878 5122882 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122882 5120242 11923 11924 Yes Security Update 10.0.20348.5622 https://support.microsoft.com/help/5122882 11923 11924 5122882 5122880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122880 5120240 12242 12243 Yes Security Update 10.0.22631.7582 https://support.microsoft.com/help/5122880 12242 12243 5122880 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 12389 12390 Yes Security Update 10.0.26100.9445 https://support.microsoft.com/help/5124008 12389 12390 5124008 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 20437 20438 Yes Security Update 10.0.26200.9445 https://support.microsoft.com/help/5124008 20437 20438 5124008 5122871 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122871 5120233 12436 12437 Yes Security Update 10.0.26100.33438 https://support.microsoft.com/help/5122871 12436 12437 5122871 5124012 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124012 5121000 20854 20853 Yes Security Update 10.0.28000.2954 https://support.microsoft.com/help/5124012 20854 20853 5124012 yhw &amp; txz <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">jmini</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">boolgombear</a> Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Fax and Scan Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Fax and Scan Service Microsoft Yes CVE-2026-87707 Heap-based Buffer Overflow 10855 12099 10378 20437 10543 10483 11569 10816 11923 11924 20438 12242 12437 12243 12436 12389 10852 11929 20854 12097 11571 10379 11931 11568 20853 11572 12390 10853 11930 12098 Elevation of Privilege 10855 Elevation of Privilege 12099 Elevation of Privilege 10378 Elevation of Privilege 20437 Elevation of Privilege 10543 Elevation of Privilege 10483 Elevation of Privilege 11569 Elevation of Privilege 10816 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12437 Elevation of Privilege 12243 Elevation of Privilege 12436 Elevation of Privilege 12389 Elevation of Privilege 10852 Elevation of Privilege 11929 Elevation of Privilege 20854 Elevation of Privilege 12097 Elevation of Privilege 11571 Elevation of Privilege 10379 Elevation of Privilege 11931 Elevation of Privilege 11568 Elevation of Privilege 20853 Elevation of Privilege 11572 Elevation of Privilege 12390 Elevation of Privilege 10853 Elevation of Privilege 11930 Elevation of Privilege 12098 Important 10855 Important 12099 Important 10378 Important 20437 Important 10543 Important 10483 Important 11569 Important 10816 Important 11923 Important 11924 Important 20438 Important 12242 Important 12437 Important 12243 Important 12436 Important 12389 Important 10852 Important 11929 Important 20854 Important 12097 Important 11571 Important 10379 Important 11931 Important 11568 Important 20853 Important 11572 Important 12390 Important 10853 Important 11930 Important 12098 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 5123099 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123099 5120418 10855 10816 10852 10853 Yes Security Update 10.0.14393.9512 https://support.microsoft.com/help/5123099 10855 10816 10852 10853 5123099 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 12099 12097 12098 Yes Security Update 10.0.19045.7725 https://support.microsoft.com/help/5122878 12099 12097 12098 5122878 5123065 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123065 5120386 10378 10379 Yes Security Update 6.2.9200.26349 https://support.microsoft.com/help/5123065 10378 10379 5123065 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 20437 20438 Yes Security Update 10.0.26200.9445 https://support.microsoft.com/help/5124008 20437 20438 5124008 5123066 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123066 5120385 10543 10483 Yes Security Update 6.3.9600.23398 https://support.microsoft.com/help/5123066 10543 10483 5123066 5122876 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122876 5120238 11569 11571 11568 11572 Yes Security Update 10.0.17763.9245 https://support.microsoft.com/help/5122876 11569 11571 11568 11572 5122876 5122882 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122882 5120242 11923 11924 Yes Security Update 10.0.20348.5622 https://support.microsoft.com/help/5122882 11923 11924 5122882 5122880 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122880 5120240 12242 12243 Yes Security Update 10.0.22631.7582 https://support.microsoft.com/help/5122880 12242 12243 5122880 5122871 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122871 5120233 12437 12436 Yes Security Update 10.0.26100.33438 https://support.microsoft.com/help/5122871 12437 12436 5122871 5124008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124008 5121003 12389 12390 Yes Security Update 10.0.26100.9445 https://support.microsoft.com/help/5124008 12389 12390 5124008 5122878 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5122878 5120249 11929 11931 11930 Yes Security Update 10.0.19044.7725 https://support.microsoft.com/help/5122878 11929 11931 11930 5122878 5124012 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5124012 5121000 20854 20853 Yes Security Update 10.0.28000.2954 https://support.microsoft.com/help/5124012 20854 20853 5124012 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-87708 Use After Free 21946 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 21945 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Host Guardian Service Tampering Vulnerability <p>Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.</p> <p><strong>What could an attacker achieve by exploiting this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability to make unauthorized modifications to protected system data. This could allow the attacker to alter system state or configuration beyond their normal privileges.</p> Windows Host Guardian Service Microsoft Yes CVE-2026-87709 Execution with Unnecessary Privileges 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Tampering 21945 Tampering 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability <p>Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Local Security Authority Server (lsasrv) Microsoft Yes CVE-2026-87710 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 haowei yan 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-87711 Stack-based Buffer Overflow 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 20437 20438 12389 12390 21945 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Quality of Service (QoS) Packet Scheduler Microsoft Yes CVE-2026-87712 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 hazard 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Bluetooth Port Driver Remote Code Execution <p>Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Bluetooth Port Driver Microsoft Yes CVE-2026-87713 Use After Free 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> WebDAV Security Feature Bypass Vulnerability <p>Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>Successful exploitation could allow an attacker to bypass access-control checks enforced by the WebDAV service, allowing files to be moved or overwritten in locations the attacker should not otherwise be authorized to modify.</p> WebDAV Microsoft Yes CVE-2026-87714 Missing Authorization 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12099 Security Feature Bypass 12098 Security Feature Bypass 12097 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 12436 Security Feature Bypass 12437 Security Feature Bypass 20854 Security Feature Bypass 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-87715 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Anonymous yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-28T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Storage Spaces Controller Denial of Service Vulnerability <p>Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.</p> Windows Storage Spaces Controller Microsoft Yes CVE-2026-87716 Heap-based Buffer Overflow 21946 12436 12437 20854 20853 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 Denial of Service 21946 Denial of Service 12436 Denial of Service 12437 Denial of Service 20854 Denial of Service 20853 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12099 Denial of Service 12098 Denial of Service 12097 Denial of Service 11923 Denial of Service 11924 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 20437 Denial of Service 20438 Denial of Service 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 12389 12390 20437 20438 21945 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 Linzishan & Anemone & Zhiniang Peng 1.1 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows BitLocker Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows BitLocker Microsoft Yes CVE-2026-88070 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 GraVity0 6ucy 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Elevation of Privilege Vulnerability <p>Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Hyper-V Microsoft Yes CVE-2026-88071 Double Free 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 <a href="https://github.com/8damon">8damon</a> with Ryftenius 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Host Guardian Service Elevation of Privilege Vulnerability <p>Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Host Guardian Service Microsoft Yes CVE-2026-88072 Improper Link Resolution Before File Access ('Link Following') 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 haowei yan Daejin Lee sweetchip <a href="https://twitter.com/keyz3r0">k0shl</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Graphics Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Graphics Kernel Microsoft Yes CVE-2026-88073 Use After Free 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Gyumin Baek with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Virtualization-Based Security (VBS) Enclave Microsoft Yes CVE-2026-88074 Integer Overflow or Wraparound 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 **Kerim Lihić:** https://www.linkedin.com/in/kerim-lihi%C4%87-863606350/ **Andi Tafilaj:** https://www.linkedin.com/in/anditafilaj **Aemeath (Salvatore):** https://github.com/tickcount Xiaobye(@xiaobye_tw) of DEVCORE Research Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Configuration Manager Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Configuration Manager Microsoft Yes CVE-2026-88075 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 16788 21565 21566 Elevation of Privilege 16788 Elevation of Privilege 21565 Elevation of Privilege 21566 Important 16788 Important 21565 Important 21566 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16788 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21565 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21566 Release Notes 16788 No Security Update 5.00.9135.1040 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/2603/38982839 16788 Release Notes Release Notes 21565 No Security Update 5.00.9141.1039 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/2603/38982839 21565 Release Notes Release Notes 21566 No Security Update 5.00.9146.1026 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/2603/38982839 21566 Release Notes <a href="https://twitter.com/kalimer0x00">Mehdi Elyassa</a> with <a href="https://www.synacktiv.com/">Synacktiv</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-88076 NULL Pointer Dereference 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-88077 Integer Overflow or Wraparound 21955 Elevation of Privilege 21955 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 154.0.4258.62 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13) and Ziling Chen</a> Edge Security with Microsoft Edge Security with Microsoft 1.0 2026-10-26T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to no loss of confidentiality (C:N) and integrity (I:N), but could lead to some loss of availability (A:L). What does that mean for this vulnerability?</strong></p> <p>An attacker using either a specially-crafted page or a content script injected into a target page can show an extension's popup over a permission prompt or screen share dialog allowing the extension to spoof parts of the prompt's UI that shows its origin.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-88078 Improper Verification of Cryptographic Signature 21955 Spoofing 21955 Moderate 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 156.0.4314.42 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Nguyen Tai Phuc An (Krypt0nS3C) 1.0 2026-10-27T07:00:00 <p>Information published.</p> 1.1 2026-10-29T07:00:00 <p>CWE added. Informational change only.</p> Windows MIDI Service Module Elevation of Privileges Vulnerability <p>Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows MIDI Service Module Microsoft Yes CVE-2026-88079 NULL Pointer Dereference 21945 21946 20437 20438 12389 12390 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://x.com/m4x_1997">Aobo Wang</a> haowei yan AIフィジカルインターフェイス二号機 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-88080 Use After Free 21946 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 21945 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Information Disclosure Vulnerability <p>Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> SQL Server Microsoft Yes CVE-2026-88081 Out-of-bounds Read 22007 20748 11478 11821 22008 22009 22010 12147 Information Disclosure 22007 Information Disclosure 20748 Information Disclosure 11478 Information Disclosure 11821 Information Disclosure 22008 Information Disclosure 22009 Information Disclosure 22010 Information Disclosure 12147 Important 22007 Important 20748 Important 11478 Important 11821 Important 22008 Important 22009 Important 22010 Important 12147 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20748 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11478 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11821 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12147 5128496 https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b 5122774 22007 Yes Security Update 14.0.3560.2 https://support.microsoft.com/help/5128496 22007 5128496 5128496 https://support.microsoft.com/help/5128496 22007 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128497 https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b 5122775 11478 Yes Security Update 14.0.2140.2 https://support.microsoft.com/help/5128497 11478 5128497 5128497 https://support.microsoft.com/help/5128497 11478 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> SQL Server Microsoft Yes CVE-2026-88082 Heap-based Buffer Overflow 12147 20748 11821 22008 22009 22010 Elevation of Privilege 12147 Elevation of Privilege 20748 Elevation of Privilege 11821 Elevation of Privilege 22008 Elevation of Privilege 22009 Elevation of Privilege 22010 Important 12147 Important 20748 Important 11821 Important 22008 Important 22009 Important 22010 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Remote Code Execution Vulnerability <p>Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> SQL Server Microsoft Yes CVE-2026-88083 Stack-based Buffer Overflow 12147 20748 22009 22010 Remote Code Execution 12147 Remote Code Execution 20748 Remote Code Execution 22009 Remote Code Execution 22010 Important 12147 Important 20748 Important 22009 Important 22010 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 Microsoft Red Team Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> SQL Server Microsoft Yes CVE-2026-88084 Allocation of Resources Without Limits or Throttling 22008 11821 Denial of Service 22008 Denial of Service 11821 Important 22008 Important 11821 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11821 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> SQL Server Microsoft Yes CVE-2026-88085 Heap-based Buffer Overflow 22007 11478 11821 20748 22008 22009 22010 12147 Elevation of Privilege 22007 Elevation of Privilege 11478 Elevation of Privilege 11821 Elevation of Privilege 20748 Elevation of Privilege 22008 Elevation of Privilege 22009 Elevation of Privilege 22010 Elevation of Privilege 12147 Important 22007 Important 11478 Important 11821 Important 20748 Important 22008 Important 22009 Important 22010 Important 12147 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 6.4 5.6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 5128496 https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b 5122774 22007 Yes Security Update 14.0.3560.2 https://support.microsoft.com/help/5128496 22007 5128496 5128496 https://support.microsoft.com/help/5128496 22007 5128497 https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b 5122775 11478 Yes Security Update 14.0.2140.2 https://support.microsoft.com/help/5128497 11478 5128497 5128497 https://support.microsoft.com/help/5128497 11478 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Information Disclosure Vulnerability <p>Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> SQL Server Microsoft Yes CVE-2026-88086 Out-of-bounds Read 22008 22009 22010 11821 12147 20748 Information Disclosure 22008 Information Disclosure 22009 Information Disclosure 22010 Information Disclosure 11821 Information Disclosure 12147 Information Disclosure 20748 Important 22008 Important 22009 Important 22010 Important 11821 Important 12147 Important 20748 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.3 4.6 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11821 5.3 4.6 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12147 5.3 4.6 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20748 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> SQL Server Microsoft Yes CVE-2026-88088 Integer Overflow or Wraparound 11821 12147 20748 22008 22009 22010 Elevation of Privilege 11821 Elevation of Privilege 12147 Elevation of Privilege 20748 Elevation of Privilege 22008 Elevation of Privilege 22009 Elevation of Privilege 22010 Important 11821 Important 12147 Important 20748 Important 22008 Important 22009 Important 22010 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> SQL Server Microsoft Yes CVE-2026-88089 Heap-based Buffer Overflow Improper Input Validation 22007 22008 20748 11478 11821 22009 22010 12147 Remote Code Execution 22007 Remote Code Execution 22008 Remote Code Execution 20748 Remote Code Execution 11478 Remote Code Execution 11821 Remote Code Execution 22009 Remote Code Execution 22010 Remote Code Execution 12147 Important 22007 Important 22008 Important 20748 Important 11478 Important 11821 Important 22009 Important 22010 Important 12147 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 5128496 https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b 5122774 22007 Yes Security Update 14.0.3560.2 https://support.microsoft.com/help/5128496 22007 5128496 5128496 https://support.microsoft.com/help/5128496 22007 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128497 https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b 5122775 11478 Yes Security Update 14.0.2140.2 https://support.microsoft.com/help/5128497 11478 5128497 5128497 https://support.microsoft.com/help/5128497 11478 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-88090 Access of Resource Using Incompatible Type ('Type Confusion') 21955 Elevation of Privilege 21955 Moderate 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 154.0.4258.37 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13) and Ziling Chen</a> 1.0 2026-10-26T07:00:00 <p>Information published.</p> 2.0 2026-10-26T07:00:00 <p>Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.</p> Windows Management Instrumentation Elevation of Privilege Vulnerability <p>Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Management Instrumentation Microsoft Yes CVE-2026-88091 Deserialization of Untrusted Data 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 0ccbbf129444eb66344ccafb92b00df4 TunSk &amp; Zhiniang Peng 1.0 2026-10-13T07:00:00 <p>Information published.</p> ASP.NET Core Tampering Vulnerability <p>Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send specially crafted HTTP/1.1 requests through a reverse proxy to an affected server. Successful exploitation could desynchronize request handling between the proxy and the server, allowing the attacker to inject an unintended request. User interaction is not required.</p> ASP.NET Core Microsoft Yes CVE-2026-88092 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 21956 16767 12256 20932 21786 12507 Tampering 21956 Tampering 16767 Tampering 12256 Tampering 20932 Tampering 21786 Tampering 12507 Important 21956 Important 16767 Important 12256 Important 20932 Important 21786 Important 12507 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.4 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C 21956 9.4 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C 16767 9.4 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C 12256 9.4 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C 20932 9.4 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C 21786 9.4 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C 12507 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12256 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12256 5130034 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20932 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20932 5130036 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21786 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/472 21786 Release Notes 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12507 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12507 5130035 thegoldmandm 1.0 2026-10-13T07:00:00 <p>Information published.</p> Desktop Window Manager Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Desktop Window Manager Microsoft Yes CVE-2026-88093 Heap-based Buffer Overflow 11568 11569 11571 11572 11929 11931 11930 12099 12097 12098 11923 11924 12243 12242 12390 12389 20438 20437 21946 21945 12436 12437 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11931 Elevation of Privilege 11930 Elevation of Privilege 12099 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 12242 Elevation of Privilege 12390 Elevation of Privilege 12389 Elevation of Privilege 20438 Elevation of Privilege 20437 Elevation of Privilege 21946 Elevation of Privilege 21945 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11931 Important 11930 Important 12099 Important 12097 Important 12098 Important 11923 Important 11924 Important 12243 Important 12242 Important 12390 Important 12389 Important 20438 Important 20437 Important 21946 Important 21945 Important 12436 Important 12437 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11931 11930 12099 12097 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 12389 20438 20437 21946 21945 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Azure Storage Library Elevation of Privilege Vulnerability <p>Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker who can supply a blob tag condition to an application using the affected library could submit a specially crafted value. Successful exploitation could allow the attacker to delete recovery snapshots or blobs beyond the operation authorized by the application. User interaction is not required.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker could add unauthorized deletion options to a permitted storage operation, allowing recovery snapshots or blobs to be deleted when the application did not intend to authorize that action.</p> Azure Storage Library Microsoft Yes CVE-2026-88094 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') 21933 22006 Elevation of Privilege 21933 Elevation of Privilege 22006 Important 21933 Important 22006 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 21933 Release Notes 21933 No Security Update 153.0.4234.46 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes Release Notes https://mvnrepository.com/artifact/com.azure/azure-storage-blob-batch/12.31.2 22006 Maybe Security Update 12.31.2 https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/storage/azure-storage-blob-batch/CHANGELOG.md#12312-2026-09-15 22006 Release Notes <a href="https://imap143.com/">Myungyong Lee</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 2.0 2026-10-26T07:00:00 <p>Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.</p> Windows DCOM Server Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows DCOM Server Microsoft Yes CVE-2026-88096 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Security Support Provider Interface Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Security Support Provider Interface Microsoft Yes CVE-2026-88098 Untrusted Pointer Dereference 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://twitter.com/crispr_x">BochengXiang(@Crispr)</a> with FDU 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Failover Cluster Denial of Service Vulnerability <p>Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.</p> Windows Failover Cluster Microsoft Yes CVE-2026-88099 Uncaught Exception 11571 11572 11923 11924 12436 12437 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12436 Denial of Service 12437 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Spaces Controller Elevation of Privilege Vulnerability <p>Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Spaces Controller Microsoft Yes CVE-2026-88100 Use After Free 12389 12390 12437 20854 20437 20438 12436 20853 21945 21946 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12389 Important 12390 Important 12437 Important 20854 Important 20437 Important 20438 Important 12436 Important 20853 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Input Method Editor (IME) Elevation of Privilege Vulnerability <p>Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained (&quot;sandboxed&quot;) execution environment to a Medium Integrity Level.</p> <p>Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> Microsoft Input Method Editor (IME) Microsoft Yes CVE-2026-88101 Weak Authentication 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/aidan-crinion/">Aidan Crinion</a> Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Failover Cluster Remote Code Execution Vulnerability <p>Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Failover Cluster Microsoft Yes CVE-2026-88102 Use After Free 11571 11572 11923 11924 12436 12437 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12436 Remote Code Execution 12437 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-88103 Use After Free 11568 11569 11571 11572 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-88105 Use After Free 11568 11569 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 10852 10853 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 10852 Important 10853 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>For an attacker to exploit this vulnerability, they would need to have knowledge of a specific operation that triggers a memory allocation failure, specifically a use after free.</p> Windows Cloud Files Mini Filter Driver Microsoft Yes CVE-2026-88106 Use After Free 12389 12390 20437 20438 21945 21946 12436 12437 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 20854 20853 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 3072 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Cloud Files Mini Filter Driver Microsoft Yes CVE-2026-88107 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Click-To-Run Elevation of Privilege Vulnerability <p>Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Office Click-To-Run Microsoft Yes CVE-2026-88109 Use After Free 11952 11953 12421 12420 11763 11762 Elevation of Privilege 11952 Elevation of Privilege 11953 Elevation of Privilege 12421 Elevation of Privilege 12420 Elevation of Privilege 11763 Elevation of Privilege 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Graphics Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Graphics Kernel Microsoft Yes CVE-2026-88110 Heap-based Buffer Overflow 21945 21946 12437 20437 20438 12389 12390 12436 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Domain Name Service Remote Code Execution Vulnerability <p>Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Role: DNS Server Microsoft Yes CVE-2026-88112 Untrusted Pointer Dereference 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Rutuja Shirali with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-88113 Use After Free 11568 11569 11929 11930 11931 12097 12098 12099 20437 20438 12242 12243 12389 12390 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Domain Name Service Remote Code Execution Vulnerability <p>Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Role: DNS Server Microsoft Yes CVE-2026-88114 Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Rutuja Shirali with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Server for NFS Remote Code Execution Vulnerability <p>Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network.</p> Windows Server for NFS Microsoft Yes CVE-2026-88115 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Domain Name Service Remote Code Execution Vulnerability <p>Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Role: DNS Server Microsoft Yes CVE-2026-88116 Untrusted Pointer Dereference 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 Rutuja Shirali with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows DHCP Server Microsoft Yes CVE-2026-88117 Use After Free 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12436 Remote Code Execution 12437 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10816 Critical 10855 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12436 Critical 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Satyanarayana Oruganti with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Background Intelligent Transfer Service (BITS) Microsoft Yes CVE-2026-88118 Integer Overflow or Wraparound Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows DHCP Server Microsoft Yes CVE-2026-88119 Use After Free 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12436 Remote Code Execution 12437 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10816 Critical 10855 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12436 Critical 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Satyanarayana Oruganti with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows DHCP Server Microsoft Yes CVE-2026-88120 Use After Free 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12436 Remote Code Execution 12437 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10816 Critical 10855 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12436 Critical 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Satyanarayana Oruganti with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability <p>Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.</p> Windows Background Intelligent Transfer Service (BITS) Microsoft Yes CVE-2026-88121 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Denial of Service Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.</p> Role: DNS Server Microsoft Yes CVE-2026-88122 Out-of-bounds Read 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 10816 Denial of Service 10855 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12436 Denial of Service 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10816 Important 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Jayesh Dubey 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Denial of Service Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.</p> Role: DNS Server Microsoft Yes CVE-2026-88123 Out-of-bounds Read 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 10816 Denial of Service 10855 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12436 Denial of Service 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10816 Important 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Jayesh Dubey 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-88124 Use After Free 21946 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 21945 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Denial of Service Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.</p> Role: DNS Server Microsoft Yes CVE-2026-88125 Out-of-bounds Read 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 10816 Denial of Service 10855 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12436 Denial of Service 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10816 Important 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Jayesh Dubey 1.0 2026-10-13T07:00:00 <p>Information published.</p> WebDAV Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> WebDAV Microsoft Yes CVE-2026-88126 Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows SMB Server Elevation of Privilege Vulnerability <p>Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows SMB Server Microsoft Yes CVE-2026-88127 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-88128 Heap-based Buffer Overflow 21946 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 21945 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; npc0vo</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Denial of Service Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.</p> Role: DNS Server Microsoft Yes CVE-2026-88129 Out-of-bounds Read 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 10816 Denial of Service 10855 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12436 Denial of Service 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10816 Important 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Jayesh Dubey 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Denial of Service Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network.</p> Role: DNS Server Microsoft Yes CVE-2026-88130 Out-of-bounds Read 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 10816 Denial of Service 10855 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12436 Denial of Service 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10816 Important 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Jayesh Dubey 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Dataverse Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Dataverse Microsoft No CVE-2026-88131 Deserialization of Untrusted Data 12338 Remote Code Execution 12338 Critical 12338 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12338 <a href="https://x.com/nmdhkr">Brad Schlintz (nmdhkr)</a> <a href="https://twitter.com/fatnass1f1ras">Firas Fatnassi &#127481;&#127475;</a> 1.0 2026-10-08T07:00:00 <p>Information published.</p> Azure Key Vault Information Disclosure Vulnerability <p>Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Exploiting this vulnerability would require an attacker modify the response to take the desired action. An attacker would also have to rely on compromising the principal consuming the SDK, which is beyond attacker's control.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of credentials.</p> Azure Key Vault Microsoft Yes CVE-2026-88132 Origin Validation Error 21871 21872 21870 21873 Information Disclosure 21871 Information Disclosure 21872 Information Disclosure 21870 Information Disclosure 21873 Important 21871 Important 21872 Important 21870 Important 21873 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21871 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21872 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21870 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21873 Release Notes https://www.nuget.org/packages/Azure.Security.KeyVault.Keys/4.10.2 21871 No Security Update 4.10.2 https://github.com/Azure/azure-sdk-for-net/blob/Azure.Security.KeyVault.Keys_4.10.2/sdk/keyvault/Azure.Security.KeyVault.Keys/CHANGELOG.md 21871 Release Notes Release Notes https://www.nuget.org/packages/Azure.Security.KeyVault.Certificates/4.9.2 21872 No Security Update 4.9.2 https://github.com/Azure/azure-sdk-for-net/blob/Azure.Security.KeyVault.Certificates_4.9.2/sdk/keyvault/Azure.Security.KeyVault.Certificates/CHANGELOG.md 21872 Release Notes Release Notes https://www.nuget.org/packages/Azure.Security.KeyVault.Secrets/4.11.2 21870 No Security Update 4.11.2 https://github.com/Azure/azure-sdk-for-net/blob/Azure.Security.KeyVault.Secrets_4.11.2/sdk/keyvault/Azure.Security.KeyVault.Secrets/CHANGELOG.md 21870 Release Notes Release Notes https://www.nuget.org/packages/Azure.Security.KeyVault.Administration/4.8.2 21873 No Security Update 4.8.2 https://github.com/Azure/azure-sdk-for-net/blob/Azure.Security.KeyVault.Administration_4.8.2/sdk/keyvault/Azure.Security.KeyVault.Administration/CHANGELOG.md 21873 Release Notes Adam Kistler 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability <p>Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Portable Device Enumerator Service Microsoft Yes CVE-2026-88133 Improper Link Resolution Before File Access ('Link Following') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Landon Peng (lunbun) with Lunbun LLC <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">jmini</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">boolgombear</a> lianowen 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-88134 Use After Free 21945 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 Elevation of Privilege 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21946 Important 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 20437 20438 12389 12390 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST SecBuddyF, Tencent KeenLab (CodeBuddy Security) 1.0 2026-10-13T07:00:00 <p>Information published.</p> WebDAV Elevation of Privilege Vulnerability <p>Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> WebDAV Microsoft Yes CVE-2026-88135 Missing Authorization 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability <p>Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system.</p> WebDAV Microsoft Yes CVE-2026-88136 Improper Resolution of Path Equivalence 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> WebDAV Information Disclosure Vulnerability <p>Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.</p> WebDAV Microsoft Yes CVE-2026-88137 Files or Directories Accessible to External Parties 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw &amp; txz 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-88139 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Key Storage Provider Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Windows Key Storage Provider Microsoft Yes CVE-2026-88140 Out-of-bounds Read 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kernel Microsoft Yes CVE-2026-88141 Use After Free 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability <p>Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.</p> Windows Background Intelligent Transfer Service (BITS) Microsoft Yes CVE-2026-88142 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Spaces Controller Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Spaces Controller Microsoft Yes CVE-2026-88143 Heap-based Buffer Overflow Integer Underflow (Wrap or Wraparound) 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; wgg with Diffract Nikhil Sherlekar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office PowerPoint Remote Code Execution Vulnerability <p>Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-88144 Use After Free 11762 11763 11951 11952 11953 12420 12421 12440 21368 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 21368 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes Anonymous 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-88145 Heap-based Buffer Overflow Integer Overflow or Wraparound 21368 11762 11763 11951 11952 11953 12420 12421 12440 Remote Code Execution 21368 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Important 21368 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> 0ccbbf129444eb66344ccafb92b00df4 yhw 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could execute code in the security context of the “NT AUTHORITY\Network Service” account.</p> Windows Background Intelligent Transfer Service (BITS) Microsoft Yes CVE-2026-88146 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw Linzishan, Anemone and Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Secure Socket Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Secure Socket Tunneling Protocol (SSTP) Microsoft Yes CVE-2026-88147 Heap-based Buffer Overflow 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 sweetchip OOOooooooOOO GraVity0 Takuto Tanda with <a href="https://gmo-cybersecurity.com/en/">GMO Cybersecurity by Ierae, Inc.</a> Takuto Tanda with <a href="https://gmo-cybersecurity.com/en/">GMO Cybersecurity by Ierae, Inc.</a> Takuto Tanda with <a href="https://gmo-cybersecurity.com/en/">GMO Cybersecurity by Ierae, Inc.</a> Takuto Tanda with <a href="https://gmo-cybersecurity.com/en/">GMO Cybersecurity by Ierae, Inc.</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-27T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-88149 Double Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-88150 Use of Uninitialized Resource 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-88151 Out-of-bounds Read 11762 11763 11952 11953 12420 12421 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability <p>Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Background Intelligent Transfer Service (BITS) Microsoft Yes CVE-2026-88152 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-88153 Out-of-bounds Read 11762 11763 11952 11953 12420 12421 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-88154 Out-of-bounds Read 11762 11763 11952 11953 12420 12421 21368 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 21368 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> <a href="https://x.com/gr4ss341">grass</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">jmini</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">boolgombear</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker with Manage List permissions could execute code remotely on the SharePoint Server.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-88155 Heap-based Buffer Overflow 11961 Remote Code Execution 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Outlook Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could send a specially crafted email message to a target user. Simply viewing the message in the Outlook Reading Pane could trigger the vulnerability, without the recipient opening the message or clicking anything in it. Successful exploitation could allow the attacker to execute code on the recipient's system. Network access is required; authentication and user interaction are not required.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-88156 Stack-based Buffer Overflow 21368 11762 11763 11951 11952 11953 12420 12421 12440 Remote Code Execution 21368 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Critical 21368 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://infosec.exchange/@moltenbit">moltenbit</a> with <a href="https://moltenbit.net/">https://moltenbit.net</a> 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft OpenSSH for Windows Remote Code Execution Vulnerability <p>Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> OpenSSH for Windows Microsoft Yes CVE-2026-88157 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://in.linkedin.com/in/thesecguy">Owais Lone</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Digest Authentication Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Microsoft Digest Authentication Microsoft Yes CVE-2026-88158 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 21945 Information Disclosure 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability <p>Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.</p> Windows Background Intelligent Transfer Service (BITS) Microsoft Yes CVE-2026-88159 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 21945 Remote Code Execution 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-88160 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability <p>Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Local Security Authority (LSA) Microsoft Yes CVE-2026-88161 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 OOOooooooOOO GraVity0 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Encrypting File System (EFS) Tampering Vulnerability <p>Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.</p> <p><strong>What could an attacker achieve by exploiting this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability to make unauthorized modifications to protected system data. This could allow the attacker to alter system state or configuration beyond their normal privileges.</p> Windows Encrypting File System (EFS) Microsoft Yes CVE-2026-88162 Incorrect Authorization 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 21946 21945 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Tampering 10852 Tampering 10853 Tampering 10816 Tampering 10855 Tampering 21946 Tampering 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Killer Queen 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker with Manage List permissions could execute code remotely on the SharePoint Server.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-88163 Integer Overflow or Wraparound Heap-based Buffer Overflow 11961 Remote Code Execution 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could send a specially crafted request to an affected SharePoint server to perform an operation beyond the permissions granted to their account. Successful exploitation could allow the attacker to modify protected content or administrative configuration. No additional user interaction is required.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-88164 Missing Authorization 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 <a href="https://www.linkedin.com/in/asaf-cohen-4103b75b/">Asaf Cohen</a> with <a href="https://xbreach.ai/">XBREACH.AI</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Active Directory Domain Services Remote Code Execution Vulnerability <p>Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network.</p> Active Directory Domain Services Microsoft Yes CVE-2026-88165 Out-of-bounds Write 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Florinel Olteanu 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker with Manage List permissions could execute code remotely on the SharePoint Server.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-88166 Integer Overflow or Wraparound Stack-based Buffer Overflow 11961 Remote Code Execution 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Word Microsoft Yes CVE-2026-88167 Buffer Over-read 11951 12440 21368 11952 11953 12421 12420 11763 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes namnp with <a href="https://x.com/vcslab">Viettel Cyber Security</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Bind Filter Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Bind Filter Driver Microsoft Yes CVE-2026-88168 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 3072 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Word Microsoft Yes CVE-2026-88169 Out-of-bounds Read 11951 12440 21368 11952 11953 12421 12420 11763 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows DHCP Server Microsoft Yes CVE-2026-88171 Double Free 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; npc0vo</a> with https://diffract-ai.com/ Jonghoi Kim Donghyeon Oh with <a href="http://kloy.ai/">KloyLab</a> Linzishan sabersauce 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-88172 Out-of-bounds Read 11762 11763 11952 11953 12420 12421 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability <p>Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Background Intelligent Transfer Service (BITS) Microsoft Yes CVE-2026-88173 Use After Free Time-of-check Time-of-use (TOCTOU) Race Condition 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Deployment Services Remote Code Execution Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Deployment Services Microsoft Yes CVE-2026-88174 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-88175 Out-of-bounds Read 21368 11762 11763 11952 11953 12420 12421 Information Disclosure 21368 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Important 21368 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> <a href="https://x.com/gr4ss341">grass</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> zsh 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-88177 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 10852 10853 10816 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 Varun Goel 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office PowerPoint Remote Code Execution Vulnerability <p>Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by submitting a specially crafted presentation for processing by an affected Office Online service. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-88178 Use After Free 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Critical 11951 Critical 12440 Critical 21368 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-88179 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 10852 10853 10816 10855 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 Varun Goel 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-88180 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 Varun Goel 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-88181 Out-of-bounds Read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 Varun Goel 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-88182 Use After Free 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Yun Cong 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office PowerPoint Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-88183 Out-of-bounds Read 11762 11763 11951 11952 11953 12420 12421 12440 21368 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 21368 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-88184 Out-of-bounds Read 21368 11762 11763 11951 11952 11953 12420 12421 12440 Information Disclosure 21368 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Important 21368 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-88185 Heap-based Buffer Overflow 11762 11763 11951 11952 11953 12420 12421 12440 21368 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 21368 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes Anonymous 0ccbbf129444eb66344ccafb92b00df4 <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab namnp with <a href="https://x.com/vcslab">Viettel Cyber Security</a> vietnq 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-88186 Heap-based Buffer Overflow Integer Overflow or Wraparound 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes yhw Anonymous 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-88188 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Varun Goel 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-88189 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Varun Goel 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-88190 Out-of-bounds Read 11762 11763 11952 11953 12420 12421 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://www.facebook.com/minhthu1112k">minhthutb111</a> <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-88191 Improper Link Resolution Before File Access ('Link Following') 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Yun Cong 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-88192 Out-of-bounds Read 11762 11763 11951 11952 11953 12420 12421 12440 21368 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 21368 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> <a href="https://www.facebook.com/minhthu1112k">minhthutb111</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Scripting Engine Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ADMINISTRATOR privileges.</p> Microsoft Scripting Engine Microsoft Yes CVE-2026-88193 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 21946 21945 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 21946 Elevation of Privilege 21945 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 21946 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21946 21945 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 David Zhu with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-88194 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 10852 10853 10816 10855 21945 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 20438 12389 12390 21945 21946 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Varun Goel 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-88195 Buffer Over-read Integer Underflow (Wrap or Wraparound) 11762 11763 11952 11953 12420 12421 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://www.facebook.com/minhthu1112k">minhthutb111</a> <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-88196 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 11951 12440 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Renzhi Li Renzhi Li 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-88197 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 11951 12440 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Renzhi Li Renzhi Li 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could overwrite arbitrary file content in the security context of the local system.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could send a specially crafted request to an affected SharePoint server to perform an operation beyond the permissions granted to their account. Successful exploitation could allow the attacker to modify protected content or administrative configuration. No additional user interaction is required.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-88198 Missing Authorization 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 <a href="https://www.linkedin.com/in/asaf-cohen-4103b75b/">Asaf Cohen</a> with <a href="https://xbreach.ai/">XBREACH.AI</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could overwrite arbitrary file content in the security context of the local system.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could send a specially crafted request to an affected SharePoint server to perform an operation beyond the permissions granted to their account. Successful exploitation could allow the attacker to modify protected content or administrative configuration. No additional user interaction is required.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-88200 Privilege Context Switching Error 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-88201 Buffer Over-read 11762 11763 11952 11953 12420 12421 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> <a href="https://www.facebook.com/minhthu1112k">minhthutb111</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Word Microsoft Yes CVE-2026-88202 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 11951 12440 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Anonymous 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office PowerPoint Information Disclosure Vulnerability <p>Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-88203 Untrusted Pointer Dereference 11952 11953 12421 12420 11763 11762 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">Jmini</a> boolgombear 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with permissions to add or modify content on an affected SharePoint page could store malicious script content in the page. The script could run in the security context of another user when that user views and interacts with the affected content, potentially allowing the attacker to access or modify SharePoint data available to that user.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-88204 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11961 Spoofing 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 P1hcn 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-88206 Server-Side Request Forgery (SSRF) 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 Ivan Vagunin 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office PowerPoint Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-88207 Heap-based Buffer Overflow 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Critical 11951 Critical 12440 Critical 21368 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with permissions to add or modify content on an affected SharePoint page could store malicious script content in the page. The script could run in the security context of another user when that user views and interacts with the affected content, potentially allowing the attacker to access or modify SharePoint data available to that user.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-88208 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11961 Spoofing 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 P1hcn 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-88209 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11961 Spoofing 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 P1hcn 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Security Feature Bypass Vulnerability <p>Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass Office macro policies used to block untrusted or malicious files.</p> Microsoft Office Word Microsoft Yes CVE-2026-88210 Reliance on Untrusted Inputs in a Security Decision 12421 12420 11763 11762 11951 12440 21368 Security Feature Bypass 12421 Security Feature Bypass 12420 Security Feature Bypass 11763 Security Feature Bypass 11762 Security Feature Bypass 11951 Security Feature Bypass 12440 Security Feature Bypass 21368 Important 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> RPC Runtime Library Remote Code Execution Vulnerability <p>Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> RPC Runtime Microsoft Yes CVE-2026-88219 Untrusted Pointer Dereference 12437 20854 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Port Driver Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows Storage Port Driver Microsoft Yes CVE-2026-88226 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Chromium CVE-2026-91732: Missing authorization <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-91732 Missing Authorization 21955 21955 Moderate 21955 3.1 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N 21955 Release Notes 21955 No Security Update 153.0.4234.46 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-10-31T07:00:00 <p>Information published.</p> MessagePack-CSharp Denial of Service Vulnerability <p>Improperly controlled sequential memory allocation in .NET allows an unauthorized attacker to deny service over a network.</p> .NET GitHub_M Yes CVE-2026-92707 Improperly Controlled Sequential Memory Allocation 21965-20837 21965-20839 21965-20838 21965-21783 21965-21785 21965-21784 21965-12414 21965-12415 21965-12416 21965-12434 21965-12432 21965-12433 21956 16767 21942 21943 21965-20837 21965-20839 21965-20838 21965-21783 21965-21785 21965-21784 21965-12414 21965-12415 21965-12416 21965-12434 21965-12432 21965-12433 21956 16767 Denial of Service 21942 Denial of Service 21943 21965-20837 21965-20839 21965-20838 21965-21783 21965-21785 21965-21784 21965-12414 21965-12415 21965-12416 21965-12434 21965-12432 21965-12433 21956 16767 Moderate 21942 Moderate 21943 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21965-20837 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21965-20839 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21965-20838 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21965-21783 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21965-21785 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21965-21784 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21965-12414 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21965-12415 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21965-12416 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21965-12434 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21965-12432 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21965-12433 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21956 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 16767 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21942 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21943 Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Protocols.MessagePack 21965-20837 21965-20839 21965-20838 Security Update 10.0.13 https://github.com/dotnet/announcements/issues/473 21965-20837 21965-20839 21965-20838 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Protocols.MessagePack 21965-21783 21965-21785 21965-21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/473 21965-21783 21965-21785 21965-21784 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Protocols.MessagePack 21965-12414 21965-12415 21965-12416 Security Update 8.0.32 https://github.com/dotnet/announcements/issues/473 21965-12414 21965-12415 21965-12416 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.SignalR.Protocols.MessagePack 21965-12434 21965-12432 21965-12433 Security Update 9.0.21 https://github.com/dotnet/announcements/issues/473 21965-12434 21965-12432 21965-12433 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://www.nuget.org/packages/MessagePack/2.5.303 21942 No Security Update 2.5.303 https://github.com/MessagePack-CSharp/MessagePack-CSharp/releases/tag/v2.5.303 21942 Release Notes Release Notes https://www.nuget.org/packages/MessagePack/3.1.9 21943 No Security Update 3.1.9 https://github.com/MessagePack-CSharp/MessagePack-CSharp/releases/tag/v3.1.9 21943 Release Notes Anonymous 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Access Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-94506 Out-of-bounds Read 11952 11953 12421 12420 11763 11762 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Bookings Elevation of Privilege Vulnerability <p>Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Bookings Microsoft No CVE-2026-94510 Authorization Bypass Through User-Controlled Key 21979 Elevation of Privilege 21979 Critical 21979 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C 21979 <a href="https://www.linkedin.com/in/asaf-cohen-4103b75b/">Asaf Cohen</a> with <a href="https://xbreach.ai/">XBREACH.AI</a> 1.0 2026-10-08T07:00:00 <p>Information published.</p> SQL Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low-level access to an affected server could send a specially crafted request to execute code on the server. User interaction is not required.</p> SQL Server Microsoft Yes CVE-2026-94512 Heap-based Buffer Overflow 22009 22010 11478 11821 12147 20748 22007 22008 Remote Code Execution 22009 Remote Code Execution 22010 Remote Code Execution 11478 Remote Code Execution 11821 Remote Code Execution 12147 Remote Code Execution 20748 Remote Code Execution 22007 Remote Code Execution 22008 Important 22009 Important 22010 Important 11478 Important 11821 Important 12147 Important 20748 Important 22007 Important 22008 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128497 https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b 5122775 11478 Yes Security Update 14.0.2140.2 https://support.microsoft.com/help/5128497 11478 5128497 5128497 https://support.microsoft.com/help/5128497 11478 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5128496 https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b 5122774 22007 Yes Security Update 14.0.3560.2 https://support.microsoft.com/help/5128496 22007 5128496 5128496 https://support.microsoft.com/help/5128496 22007 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Red Team Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft SQL Server Denial of Service Vulnerability <p>Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> SQL Server Microsoft Yes CVE-2026-94520 Use of Externally-Controlled Format String 22007 12147 22008 11478 11821 22009 20748 22010 Denial of Service 22007 Denial of Service 12147 Denial of Service 22008 Denial of Service 11478 Denial of Service 11821 Denial of Service 22009 Denial of Service 20748 Denial of Service 22010 Important 22007 Important 12147 Important 22008 Important 11478 Important 11821 Important 22009 Important 20748 Important 22010 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.9 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12147 4.9 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11478 4.9 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11821 4.9 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20748 5128496 https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b 5122774 22007 Yes Security Update 14.0.3560.2 https://support.microsoft.com/help/5128496 22007 5128496 5128496 https://support.microsoft.com/help/5128496 22007 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5128497 https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b 5122775 11478 Yes Security Update 14.0.2140.2 https://support.microsoft.com/help/5128497 11478 5128497 5128497 https://support.microsoft.com/help/5128497 11478 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Event Logging Service Information Disclosure Vulnerability <p>Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Event Logging Service Microsoft Yes CVE-2026-95904 Buffer Over-read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 TunSk & Zhiniang Peng 1.0 2026-10-13T07:00:00 <p>Information published.</p> Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability <p>Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Connected Devices Platform Service (Cdpsvc) Microsoft Yes CVE-2026-95943 Double Free 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 AIフィジカルインターフェイス二号機 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Elevation of Privilege Vulnerability <p>No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An authenticated attacker with access to the domain could perform remote code execution on the SharePoint server to elevate themselves to SharePoint admin.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-96044 Improper Validation of Specified Type of Input 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-16T07:00:00 <p>CWE added. Informational change only.</p> Windows Media Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Media Microsoft Yes CVE-2026-96071 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Media Player Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints.</p> Windows Media Player Microsoft Yes CVE-2026-96096 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Desktop Window Manager Elevation of Privilege Vulnerability <p>Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Desktop Window Manager Microsoft Yes CVE-2026-96108 Use After Free 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/divyasundar16">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Domain Name Service Remote Code Execution Vulnerability <p>Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.</p> Role: DNS Server Microsoft Yes CVE-2026-96113 Heap-based Buffer Overflow Numeric Truncation Error 10483 10816 10855 11571 11924 12436 12437 10852 10853 11568 11569 10379 10543 11572 11923 10378 Remote Code Execution 10483 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11571 Remote Code Execution 11924 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 10379 Remote Code Execution 10543 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 10378 Important 10483 Important 10816 Important 10855 Important 11571 Important 11924 Important 12436 Important 12437 Important 10852 Important 10853 Important 11568 Important 11569 Important 10379 Important 10543 Important 11572 Important 11923 Important 10378 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 10852 10853 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11568 11569 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11568 11569 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11568 11569 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 5126655 https://support.microsoft.com/help/5126655 11924 11923 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10379 10378 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10379 10378 5126835 <a href="https://x.com/dark_puzzle">Souhail Hammou</a> Pwnforr777 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Graphics Kernel Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Graphics Kernel Microsoft Yes CVE-2026-96118 Out-of-bounds Read Integer Overflow or Wraparound 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 byzero, mj with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Health and Optimized Experiences Service Information Disclosure Vulnerability <p>Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Successful exploitation could allow an attacker to access diagnostic information collected by the Windows Health and Optimized Experiences Service, including system configuration, application crash, performance, and kernel driver allocation data.</p> Windows Health and Optimized Experiences Service Microsoft Yes CVE-2026-96183 Missing Authentication for Critical Function 12389 12390 20437 20438 21945 21946 20854 20853 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 20854 Information Disclosure 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/ali-shihab-952228318/">Ali Shihab</a> with <a href="https://www.esraa.edu.iq/">Al-Esraa University</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Exchange Online Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Exchange Online Microsoft No CVE-2026-96185 Stack-based Buffer Overflow 10133 Remote Code Execution 10133 Critical 10133 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10133 <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC Younggi Park (grill66) with UIUC 1.0 2026-10-22T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Elevation of Privilege Vulnerability <p>Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-96186 Deserialization of Untrusted Data 12389 12390 20437 20438 21945 21946 12436 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11931 11930 12099 12097 12098 11923 11924 12243 12242 12437 20853 20854 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11931 Elevation of Privilege 11930 Elevation of Privilege 12099 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 12242 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11931 Important 11930 Important 12099 Important 12097 Important 12098 Important 11923 Important 11924 Important 12243 Important 12242 Important 12437 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11931 11930 12099 12097 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 jhanks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Information Disclosure Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>This vulnerability could lead to a browser sandbox escape.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user would have to click on a specially crafted URL to be compromised by the attacker, and navigate to a malicious site where malicious code would execute a series of specially crafted queries.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-96187 Access of Resource Using Incompatible Type ('Type Confusion') 21955 Information Disclosure 21955 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 155.0.4283.45 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Edge Security with Microsoft 1.0 2026-10-26T07:00:00 <p>Information published.</p> Microsoft PowerToys Elevation of Privilege Vulnerability <p>External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p> Microsoft PowerToys Microsoft Yes CVE-2026-96188 External Control of System or Configuration Setting 21354 Elevation of Privilege 21354 Important 21354 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21354 Release Notes https://github.com/microsoft/PowerToys/releases/download/v0.101.2632.0/PowerToysUserSetup-0.101.2632.0-x64.exe 21354 No Security Update 0.101.2632.0 https://github.com/microsoft/PowerToys/releases/tag/v0.101.2632.0 21354 Release Notes Yuval Fradkin 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires an authenticated client to click a link so that an unauthenticated attacker can initiate remote code execution.</p> Microsoft Edge for iOS Microsoft Yes CVE-2026-96192 Use After Free 21955 Remote Code Execution 21955 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 155.0.4283.45 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Edge Security with Microsoft 1.0 2026-10-26T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability <p>Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>Successful exploitation could bypass the path validation safeguards that check which files may be changed and require user approval for sensitive locations, allowing changes to protected files without the user’s knowledge or consent.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must open or load attacker‑controlled content—such as importing a malicious WSDL or opening a file—so the application processes it and triggers the vulnerability.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-96196 Incomplete List of Disallowed Inputs 21955 Security Feature Bypass 21955 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 156.0.4314.50 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Edge Security with Microsoft 1.0 2026-10-27T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-96198 Heap-based Buffer Overflow 21955 Remote Code Execution 21955 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 154.0.4258.37 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Anonymous <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13) and Ziling Chen</a> Dongju Kim (molgryn) <a href="https://www.linkedin.com/in/hjchoi17/">Hyeongjun Choi</a> doolyx1 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-26T07:00:00 <p>Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-96199 Heap-based Buffer Overflow 21955 Remote Code Execution 21955 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 154.0.4258.37 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13) and Ziling Chen</a> 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-26T07:00:00 <p>Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.</p> Windows Raw Image Extension Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Windows Raw Image Extension Microsoft Yes CVE-2026-96202 Heap-based Buffer Overflow 11804-10853 11804-10852 11804-21994 11804-21995 11804-11931 11804-11930 11804-11929 11804-21996 11804-21997 11804-21998 11804-21999 11804-22000 11804-22001 11804-22002 11804-22003 11804-22004 11804-22005 11804-11673 11804-11570 11804-11569 11804-11568 11804-21989 11804-21945 11804-21946 21933 Remote Code Execution 11804-10853 Remote Code Execution 11804-10852 Remote Code Execution 11804-21994 Remote Code Execution 11804-21995 Remote Code Execution 11804-11931 Remote Code Execution 11804-11930 Remote Code Execution 11804-11929 Remote Code Execution 11804-21996 Remote Code Execution 11804-21997 Remote Code Execution 11804-21998 Remote Code Execution 11804-21999 Remote Code Execution 11804-22000 Remote Code Execution 11804-22001 Remote Code Execution 11804-22002 Remote Code Execution 11804-22003 Remote Code Execution 11804-22004 Remote Code Execution 11804-22005 Remote Code Execution 11804-11673 Remote Code Execution 11804-11570 Remote Code Execution 11804-11569 Remote Code Execution 11804-11568 Remote Code Execution 11804-21989 Remote Code Execution 11804-21945 Remote Code Execution 11804-21946 Remote Code Execution 21933 Critical 11804-10853 Critical 11804-10852 Critical 11804-21994 Critical 11804-21995 Critical 11804-11931 Critical 11804-11930 Critical 11804-11929 Critical 11804-21996 Critical 11804-21997 Critical 11804-21998 Critical 11804-21999 Critical 11804-22000 Critical 11804-22001 Critical 11804-22002 Critical 11804-22003 Critical 11804-22004 Critical 11804-22005 Critical 11804-11673 Critical 11804-11570 Critical 11804-11569 Critical 11804-11568 Critical 11804-21989 Critical 11804-21945 Critical 11804-21946 Critical 21933 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21994 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21995 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21996 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21997 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21998 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21999 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22000 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22001 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22002 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22003 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22004 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22005 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11673 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21989 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21933 Release Notes 11804-10853 11804-10852 11804-21994 11804-21995 11804-11931 11804-11930 11804-11929 11804-21998 11804-21999 11804-22000 11804-22001 11804-22002 11804-22003 11804-22004 11804-22005 11804-11673 11804-11570 11804-11569 11804-11568 Maybe Security Update 2.4.36.0 https://support.microsoft.com/en-us/accounts-billing/get-updates-for-apps-and-games-in-microsoft-store 11804-10853 11804-10852 11804-21994 11804-21995 11804-11931 11804-11930 11804-11929 11804-21998 11804-21999 11804-22000 11804-22001 11804-22002 11804-22003 11804-22004 11804-22005 11804-11673 11804-11570 11804-11569 11804-11568 Release Notes Release Notes 11804-21996 11804-21997 11804-21989 11804-21945 11804-21946 Maybe Security Update 2.5.35.0 https://support.microsoft.com/en-us/accounts-billing/get-updates-for-apps-and-games-in-microsoft-store 11804-21996 11804-21997 11804-21989 11804-21945 11804-21946 Release Notes Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 154.0.4258.37 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 No Security Update 154.0.4258.38 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes Anonymous 1.0 2026-10-16T07:00:00 <p>Information published.</p> 2.0 2026-10-26T07:00:00 <p>Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p>Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained (&quot;sandboxed&quot;) execution environment to a Medium Integrity Level or a High Integrity Level.</p> <p>Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-96203 Use After Free 21955 Elevation of Privilege 21955 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21955 Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 155.0.4283.45 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13) and Ziling Chen</a> 0AF3B0CB6FEFDED70267D4510DF654D8 1.0 2026-10-26T07:00:00 <p>Information published.</p> Azure Arc Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>With this vulnerability a finder with a low-privilege connectivity role could reach the Arc host's managed-identity credential.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), but lead to no loss of integrity (I:N) or availability (A:N). What does that mean for this vulnerability?</strong></p> <p>This vulnerability could allow an attacker to disclose confidential information such as encrypted credentials but does not allow the attacker to modify any data or make the service unavailable.</p> Azure Arc Microsoft Yes CVE-2026-96204 Server-Side Request Forgery (SSRF) 20516 Elevation of Privilege 20516 Important 20516 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 20516 Release Notes https://gbl.his.arc.azure.com/azcmagent/1.68/AzureConnectedMachineAgent.msi 20516 No Security Update 1.68 https://learn.microsoft.com/en-us/azure/azure-arc/servers/agent-release-notes 20516 Release Notes RON (XBREACH.AI) with <a href="https://xbreach.ai/">XBREACH.AI</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Subsystem for Linux Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized stack memory.</p> Windows Subsystem for Linux Microsoft Yes CVE-2026-96206 Use of Uninitialized Resource 12069 Information Disclosure 12069 Important 12069 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12069 Release Notes https://github.com/microsoft/WSL/releases/tag/3.0.1 12069 No Security Update 3.0.1 https://github.com/microsoft/WSL/releases/tag/3.0.1 12069 Release Notes <a href="https://www.linkedin.com/in/yakup-bıyık/">Yakup Sait Bıyık</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Partner Center Elevation of Privilege Vulnerability <p>Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Partner Center Microsoft No CVE-2026-96207 Improper Certificate Validation 12429 Elevation of Privilege 12429 Critical 12429 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 10.0 8.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12429 Lucas Gayk with Microsoft 1.0 2026-10-08T07:00:00 <p>Information published.</p> Windows Network File System Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Network File System Microsoft Yes CVE-2026-96209 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; npc0vo with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Autopilot Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Autopilot Microsoft Yes CVE-2026-96215 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 12389 12390 20437 20438 21945 21946 20854 20853 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-96216 Use After Free Untrusted Pointer Dereference 11568 11569 11571 11572 11929 11930 11931 12099 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 12098 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 12098 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 12098 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12097 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Kookhwan Lee 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-96217 Heap-based Buffer Overflow Integer Overflow or Wraparound 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11930 11931 11929 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11930 11931 11929 5126657 5126657 https://support.microsoft.com/help/5126657 11930 11931 12099 12098 12097 11929 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Stack Tampering Vulnerability <p>Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.</p> Windows Update Stack Microsoft Yes CVE-2026-96218 External Control of System or Configuration Setting 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 20854 20853 12437 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12099 Tampering 12098 Tampering 12097 Tampering 11923 Tampering 11924 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 20437 Tampering 20438 Tampering 21945 Tampering 21946 Tampering 12436 Tampering 20854 Tampering 20853 Tampering 12437 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 20854 Important 20853 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">jmini</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">boolgombear</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability <p>Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Local Security Authority Subsystem Service (LSASS) Microsoft Yes CVE-2026-96219 Out-of-bounds Write 20854 20853 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 Remote Code Execution 20854 Remote Code Execution 20853 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Important 20854 Important 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Assigned Access Elevation of Privilege Vulnerability <p>Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Assigned Access Microsoft Yes CVE-2026-96220 Improper Control of Generation of Code ('Code Injection') 11568 11569 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 11571 11572 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 11571 Elevation of Privilege 11572 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Important 11571 Important 11572 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://x.com/p0w1_">Manuel Feifel (p0w1_)</a> with <a href="https://www.infoguard.ch/">InfoGuard AG</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Spoofing Vulnerability <p>Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-96222 Improper Certificate Validation 21957-12414 21957-12415 21957-12416 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10483 10543 21956 16767 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 Spoofing 21957-12414 Spoofing 21957-12415 Spoofing 21957-12416 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 12437 Spoofing 12436 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 10483 Spoofing 10543 Spoofing 21956 Spoofing 16767 Spoofing 12079-21983 Spoofing 12079-21984 Spoofing 12079-21985 Spoofing 12079-21986 Spoofing 12079-12436 Spoofing 12078-21987 Spoofing 12079-21988 Spoofing 12079-11923 Spoofing 12079-21989 Spoofing 2472-21987 Spoofing 2472-10378 Spoofing 2472-10483 Spoofing 11723-22028 Spoofing 11723-10816 Spoofing 11723-11571 Spoofing 11677-22029 Spoofing 11676-22029 Spoofing 11676-21983 Spoofing 11676-21984 Spoofing 11676-11571 Spoofing 11676-11923 Spoofing 11863-10378 Spoofing 11863-10483 Spoofing 11650-22028 Spoofing 11650-10378 Spoofing 11650-10483 Spoofing 11650-10816 Critical 21957-12414 Critical 21957-12415 Critical 21957-12416 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10483 Critical 10543 Critical 21956 Critical 16767 Critical 12079-21983 Critical 12079-21984 Critical 12079-21985 Critical 12079-21986 Critical 12079-12436 Critical 12078-21987 Critical 12079-21988 Critical 12079-11923 Critical 12079-21989 Critical 2472-21987 Critical 2472-10378 Critical 2472-10483 Critical 11723-22028 Critical 11723-10816 Critical 11723-11571 Critical 11677-22029 Critical 11676-22029 Critical 11676-21983 Critical 11676-21984 Critical 11676-11571 Critical 11676-11923 Critical 11863-10378 Critical 11863-10483 Critical 11650-22028 Critical 11650-10378 Critical 11650-10483 Critical 11650-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21957-12414 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21957-12415 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21957-12416 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11924 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10543 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21956 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 16767 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12079-21983 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12079-21984 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12079-21985 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12079-21986 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12079-12436 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12078-21987 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12079-21988 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12079-11923 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12079-21989 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 2472-21987 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 2472-10378 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 2472-10483 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11723-22028 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11723-10816 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11723-11571 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11677-22029 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11676-22029 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11676-21983 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11676-21984 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11676-11571 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11676-11923 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11863-10378 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11863-10483 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11650-22028 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11650-10378 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11650-10483 7.4 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11650-10816 Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-12414 21957-12415 21957-12416 Security Update 8.0.5 https://github.com/dotnet/announcements/issues/474 21957-12414 21957-12415 21957-12416 Release Notes 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 11723-22028 11723-10816 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 <a href="https://www.linkedin.com/in/vaishabernard/">Vaisha Bernard</a> with <a href="https://eye.security/">Eye Security</a> 1.1 2026-10-16T07:00:00 <p>Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Elevation of Privilege Vulnerability <p>Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Hyper-V Microsoft Yes CVE-2026-96223 Use After Free 21945 21946 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 21945 Important 21946 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 iElysia <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">Jmini</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">boolgombear</a> <a href="https://www.linkedin.com/in/cory-rondorf-41788b209/">Cory Rondorf</a> with <a href="https://www.parsons.com/">Parsons Corporation</a> Anonymous <a href="https://twitter.com/ranchoice">RanchoIce</a> Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Remote Code Execution Vulnerability <p>Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> .NET Microsoft Yes CVE-2026-96224 Out-of-bounds Write 21956 16767 21783 20837 12414 12434 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 Remote Code Execution 21956 Remote Code Execution 16767 Remote Code Execution 21783 Remote Code Execution 20837 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 12079-21983 Remote Code Execution 12079-21984 Remote Code Execution 12079-21985 Remote Code Execution 12079-21986 Remote Code Execution 12079-12436 Remote Code Execution 12078-21987 Remote Code Execution 12079-21988 Remote Code Execution 12079-11923 Remote Code Execution 12079-21989 Remote Code Execution 2472-21987 Remote Code Execution 2472-10378 Remote Code Execution 2472-10483 Remote Code Execution 11723-22028 Remote Code Execution 11723-10816 Remote Code Execution 11723-11571 Remote Code Execution 11677-22029 Remote Code Execution 11676-22029 Remote Code Execution 11676-21983 Remote Code Execution 11676-21984 Remote Code Execution 11676-11571 Remote Code Execution 11676-11923 Remote Code Execution 11863-10378 Remote Code Execution 11863-10483 Remote Code Execution 11650-22028 Remote Code Execution 11650-10378 Remote Code Execution 11650-10483 Remote Code Execution 11650-10816 Important 21956 Important 16767 Important 21783 Important 20837 Important 12414 Important 12434 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21985 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21986 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21988 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21989 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-21987 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-22029 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21983 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21984 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-22028 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/475 21783 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 41ae55e9310ff27fa6f26af4727e5590 <a href="https://x.com/ky0tofu">Ky0toFu</a> <a href="https://www.linkedin.com/in/abdul-rehman---/">Muhammad Abdul Rehman</a> <a href="https://www.linkedin.com/in/nguyen-hoang-quoc-an-009863267/">kayiz</a> with <a href="http://lp.com.vn/">Lien Phat Technology Corporation</a> Quac Tran <a href="https://x.com/m4x_1997">Aobo Wang</a> <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ROOT privileges.</p> .NET Microsoft Yes CVE-2026-96225 Improper Link Resolution Before File Access ('Link Following') 12416 20838 21785 21784 12433 20839 12415 12432 21956 16767 Elevation of Privilege 12416 Elevation of Privilege 20838 Elevation of Privilege 21785 Elevation of Privilege 21784 Elevation of Privilege 12433 Elevation of Privilege 20839 Elevation of Privilege 12415 Elevation of Privilege 12432 Elevation of Privilege 21956 Elevation of Privilege 16767 Important 12416 Important 20838 Important 21785 Important 21784 Important 12433 Important 20839 Important 12415 Important 12432 Important 21956 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12416 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20838 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21785 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21784 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12433 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20839 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12415 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12432 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12416 12415 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12416 12415 5130034 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20838 20839 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20838 20839 5130036 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21785 21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/476 21785 21784 Release Notes 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12433 12432 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12433 12432 5130035 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes <a href="https://www.linkedin.com/in/đức-nguyễn-văn-minh-19a925287/">minhducnguyen03022002@gmail.com</a> with <a href="https://saigonnewport.com.vn/">Saigon Newport Corporation</a> <a href="https://www.linkedin.com/in/stanley-t-62325394/">Stanley Tobias</a> Attila.Cs(zerodaybugs.com) with https://zerodaybugs.com/ <a href="https://www.linkedin.com/in/kevin-sch/">Kevin Schmidt</a> <a href="https://linkedin.com/in/weeraphat-srisutham">Weeraphat Srisutham</a> <a href="https://x.com/ky0tofu">Ky0toFu</a> Coşkun Bağrıa&#231;ık Raffaello Tamagnini <a href="https://www.linkedin.com/in/leandrosbatista21/">Leandro Batista</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.2 2026-10-27T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> .NET Information Disclosure Vulnerability <p>Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of NetNTLMv2 hashes.</p> .NET Microsoft Yes CVE-2026-96229 Permissive List of Allowed Inputs 21956 16767 21783 12414 12434 20837 Information Disclosure 21956 Information Disclosure 16767 Information Disclosure 21783 Information Disclosure 12414 Information Disclosure 12434 Information Disclosure 20837 Important 21956 Important 16767 Important 21783 Important 12414 Important 12434 Important 20837 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21956 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 16767 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21783 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12414 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12434 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20837 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/477 21783 Release Notes 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 5130036 nono Ali Az <a href="https://x.com/omarkhalil1138">Omar Khaleel</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> ASP.NET Core Remote Code Execution Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could host a specially crafted web page and convince a developer to visit it. The page could send requests to a vulnerable development server running on the developer's system, and successful exploitation could allow the attacker to execute code in the developer's context. User interaction is required.</p> ASP.NET Core Microsoft Yes CVE-2026-96230 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 21963-20837 21963-20839 21963-20838 21963-21783 21963-21785 21963-21784 21963-12414 21963-12415 21963-12416 21963-12434 21963-12432 21963-12433 21956 16767 Remote Code Execution 21963-20837 Remote Code Execution 21963-20839 Remote Code Execution 21963-20838 Remote Code Execution 21963-21783 Remote Code Execution 21963-21785 Remote Code Execution 21963-21784 Remote Code Execution 21963-12414 Remote Code Execution 21963-12415 Remote Code Execution 21963-12416 Remote Code Execution 21963-12434 Remote Code Execution 21963-12432 Remote Code Execution 21963-12433 Remote Code Execution 21956 Remote Code Execution 16767 Important 21963-20837 Important 21963-20839 Important 21963-20838 Important 21963-21783 Important 21963-21785 Important 21963-21784 Important 21963-12414 Important 21963-12415 Important 21963-12416 Important 21963-12434 Important 21963-12432 Important 21963-12433 Important 21956 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-20837 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-20839 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-20838 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-21783 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-21785 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-21784 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-12414 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-12415 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-12416 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-12434 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-12432 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21963-12433 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.Components.WebAssembly.Server 21963-20837 21963-20839 21963-20838 Security Update 10.0.13 https://github.com/dotnet/announcements/issues/478 21963-20837 21963-20839 21963-20838 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.Components.WebAssembly.Server 21963-21783 21963-21785 21963-21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/478 21963-21783 21963-21785 21963-21784 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.Components.WebAssembly.Server 21963-12414 21963-12415 21963-12416 Security Update 8.0.32 https://github.com/dotnet/announcements/issues/478 21963-12414 21963-12415 21963-12416 Release Notes Release Notes https://www.nuget.org/packages/Microsoft.AspNetCore.Components.WebAssembly.Server 21963-12434 21963-12432 21963-12433 Security Update 9.0.21 https://github.com/dotnet/announcements/issues/478 21963-12434 21963-12432 21963-12433 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes <a href="https://x.com/kookiz/">Kevin Gosse</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ROOT privileges.</p> .NET Microsoft Yes CVE-2026-96231 Improper Link Resolution Before File Access ('Link Following') 21956 16767 12416 20838 12433 21785 21784 12415 20839 12432 Elevation of Privilege 21956 Elevation of Privilege 16767 Elevation of Privilege 12416 Elevation of Privilege 20838 Elevation of Privilege 12433 Elevation of Privilege 21785 Elevation of Privilege 21784 Elevation of Privilege 12415 Elevation of Privilege 20839 Elevation of Privilege 12432 Important 21956 Important 16767 Important 12416 Important 20838 Important 12433 Important 21785 Important 21784 Important 12415 Important 20839 Important 12432 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12416 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20838 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12433 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21785 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21784 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12415 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20839 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12432 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12416 12415 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12416 12415 5130034 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20838 20839 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20838 20839 5130036 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12433 12432 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12433 12432 5130035 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21785 21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/479 21785 21784 Release Notes <a href="https://www.linkedin.com/in/đức-nguyễn-văn-minh-19a925287/">Nguyễn Văn Minh Đức</a> with <a href="https://saigonnewport.com.vn/">Saigon Newport Corporation</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Information Disclosure Vulnerability <p>Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is internal memory pointers. These leaked addresses could help an attacker bypass security protection and facilitate further exploitation.</p> .NET Microsoft Yes CVE-2026-96232 Out-of-bounds Read 21956 20837 12414 12434 16767 21783 Information Disclosure 21956 Information Disclosure 20837 Information Disclosure 12414 Information Disclosure 12434 Information Disclosure 16767 Information Disclosure 21783 Important 21956 Important 20837 Important 12414 Important 12434 Important 16767 Important 21783 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21956 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20837 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 16767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21783 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/480 21783 Release Notes <a href="https://x.com/ky0tofu">Ky0toFu</a> <a href="https://x.com/m4x_1997">Aobo Wang</a> <a href="https://x.com/m4x_1997">Aobo Wang</a> Raffaello Tamagnini 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> ASP.NET Core Denial of Service Vulnerability <p>Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> ASP.NET Core Microsoft Yes CVE-2026-96233 Out-of-bounds Write 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 20837 20839 20838 21783 21785 21784 12434 12432 12433 12414 12415 12416 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 Denial of Service 12079-21983 Denial of Service 12079-21984 Denial of Service 12079-21985 Denial of Service 12079-21986 Denial of Service 12079-12436 Denial of Service 12078-21987 Denial of Service 12079-21988 Denial of Service 12079-11923 Denial of Service 12079-21989 Denial of Service 20837 Denial of Service 20839 Denial of Service 20838 Denial of Service 21783 Denial of Service 21785 Denial of Service 21784 Denial of Service 12434 Denial of Service 12432 Denial of Service 12433 Denial of Service 12414 Denial of Service 12415 Denial of Service 12416 Denial of Service 2472-21987 Denial of Service 2472-10378 Denial of Service 2472-10483 Denial of Service 11723-22028 Denial of Service 11723-10816 Denial of Service 11723-11571 Denial of Service 11677-22029 Denial of Service 11676-22029 Denial of Service 11676-21983 Denial of Service 11676-21984 Denial of Service 11676-11571 Denial of Service 11676-11923 Denial of Service 11863-10378 Denial of Service 11863-10483 Denial of Service 11650-22028 Denial of Service 11650-10378 Denial of Service 11650-10483 Denial of Service 11650-10816 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Important 20837 Important 20839 Important 20838 Important 21783 Important 21785 Important 21784 Important 12434 Important 12432 Important 12433 Important 12414 Important 12415 Important 12416 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21985 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21986 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21988 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21989 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20837 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21783 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21785 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21784 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 20839 20838 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 20839 20838 5130036 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 21785 21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/481 21783 21785 21784 Release Notes 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 12432 12433 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 12432 12433 5130035 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 12415 12416 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 12415 12416 5130034 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 s3zer0 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Information Disclosure Vulnerability <p>Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of credentials.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> .NET Microsoft Yes CVE-2026-96234 Origin Validation Error 20837 12414 12434 21783 21956 16767 Information Disclosure 20837 Information Disclosure 12414 Information Disclosure 12434 Information Disclosure 21783 Information Disclosure 21956 Information Disclosure 16767 Important 20837 Important 12414 Important 12434 Important 21783 Important 21956 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20837 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12414 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12434 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21783 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21956 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 16767 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/482 21783 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes <a href="https://x.com/ky0tofu">Ky0toFu</a> nono <a href="https://www.linkedin.com/in/abdul-rehman---/">Muhammad Abdul Rehman</a> <a href="https://www.linkedin.com/in/nguyen-hoang-quoc-an-009863267/">kayiz</a> with <a href="http://lp.com.vn/">Lien Phat Technology Corporation</a> Mustafa Gozhamam Ali Az Anonymous nono Anonymous <a href="https://github.com/piropatriot">piropatriot</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.2 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.3 2026-10-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> .NET Remote Code Execution Vulnerability <p>Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> .NET Microsoft Yes CVE-2026-96235 Out-of-bounds Write 20837 12414 12434 16767 21956 21783 Remote Code Execution 20837 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 16767 Remote Code Execution 21956 Remote Code Execution 21783 Important 20837 Important 12414 Important 12434 Important 16767 Important 21956 Important 21783 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20837 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12414 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12434 5130035 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/483 21783 Release Notes <a href="https://www.linkedin.com/in/mateusz-mto-gierblinski/">Mateusz Gierblinski</a> with <a href="https://curios-it.eu/">Curios</a> Anonymous 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> ASP.NET Core Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> ASP.NET Core Microsoft Yes CVE-2026-96236 Allocation of Resources Without Limits or Throttling 21786 20932 12256 12507 21956 16767 Denial of Service 21786 Denial of Service 20932 Denial of Service 12256 Denial of Service 12507 Denial of Service 21956 Denial of Service 16767 Important 21786 Important 20932 Important 12256 Important 12507 Important 21956 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21786 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20932 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12256 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12507 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21956 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21786 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/484 21786 Release Notes 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20932 Security Update 10.0.13 https://support.microsoft.com/help/5130036 20932 5130036 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12256 Security Update 8.0.32 https://support.microsoft.com/help/5130034 12256 5130034 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12507 Security Update 9.0.21 https://support.microsoft.com/help/5130035 12507 5130035 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes <a href="https://www.linkedin.com/in/kevin-sch/">Kevin Schmidt</a> <a href="https://www.linkedin.com/in/rolf-z-67962959/">Rolf Zengafinnen</a> <a href="https://www.linkedin.com/in/leandrosbatista21/">Leandro Batista</a> <a href="https://www.linkedin.com/in/nguyen-hoang-quoc-an-009863267/">kayiz</a> with <a href="http://lp.com.vn/">Lien Phat Technology Corporation</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for ASP.NET Core 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Remote Code Execution Vulnerability <p>Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> .NET Microsoft Yes CVE-2026-96237 Inclusion of Functionality from Untrusted Control Sphere 21956 16767 12414 12415 12416 20837 20839 20838 12434 12432 12433 Remote Code Execution 21956 Remote Code Execution 16767 Remote Code Execution 12414 Remote Code Execution 12415 Remote Code Execution 12416 Remote Code Execution 20837 Remote Code Execution 20839 Remote Code Execution 20838 Remote Code Execution 12434 Remote Code Execution 12432 Remote Code Execution 12433 Important 21956 Important 16767 Important 12414 Important 12415 Important 12416 Important 20837 Important 20839 Important 20838 Important 12434 Important 12432 Important 12433 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12433 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 12415 12416 Security Update 8.0.132 https://support.microsoft.com/help/5130034 12414 12415 12416 5130034 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 20839 20838 Security Update 10.0.113 https://support.microsoft.com/help/5130036 20837 20839 20838 5130036 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 12432 12433 Security Update 9.0.319 https://support.microsoft.com/help/5130035 12434 12432 12433 5130035 <a href="https://x.com/ky0tofu">Ky0toFu</a> 1.1 2026-10-16T07:00:00 <p>Updated the Security Updates table to add download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Security Feature Bypass Vulnerability <p>Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass NuGet Package Source Mapping, a security feature that restricts packages to approved sources. This could cause content from an unauthorized package source to be selected and installed.</p> .NET Microsoft Yes CVE-2026-96238 Origin Validation Error 12434 12432 12433 21783 21785 21784 12414 12415 12416 20837 20839 20838 21956 16767 Security Feature Bypass 12434 Security Feature Bypass 12432 Security Feature Bypass 12433 Security Feature Bypass 21783 Security Feature Bypass 21785 Security Feature Bypass 21784 Security Feature Bypass 12414 Security Feature Bypass 12415 Security Feature Bypass 12416 Security Feature Bypass 20837 Security Feature Bypass 20839 Security Feature Bypass 20838 Security Feature Bypass 21956 Security Feature Bypass 16767 Important 12434 Important 12432 Important 12433 Important 21783 Important 21785 Important 21784 Important 12414 Important 12415 Important 12416 Important 20837 Important 20839 Important 20838 Important 21956 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12434 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12432 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12433 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21783 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21785 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21784 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12414 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12415 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12416 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20837 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20839 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20838 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21956 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 16767 5130035 https://dotnet.microsoft.com/download/dotnet/9.0 12434 12432 12433 Security Update 9.0.122 https://support.microsoft.com/help/5130035 12434 12432 12433 5130035 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 21785 21784 Security Update 11.0.100-rc.2 https://github.com/dotnet/announcements/issues/486 21783 21785 21784 Release Notes 5130034 https://dotnet.microsoft.com/download/dotnet/8.0 12414 12415 12416 Security Update 8.0.426 https://support.microsoft.com/help/5130034 12414 12415 12416 5130034 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 20839 20838 Security Update 10.0.113 https://support.microsoft.com/help/5130036 20837 20839 20838 5130036 Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Raffaello Tamagnini <a href="https://www.linkedin.com/company/vantage-security-corporation/">Vantage Sec</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows WalletService Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows WalletService Microsoft Yes CVE-2026-96243 Improper Link Resolution Before File Access ('Link Following') 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20853 20438 21945 21946 12436 12437 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20853 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20853 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 <a href="https://x.com/heegong123">HeeChan Kim</a> with <a href="https://h4c.team/">TeamH4C</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Internal System User Profile Elevation of Privilege Vulnerability <p>Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Internal System User Profile Microsoft Yes CVE-2026-96244 Use After Free 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 <a href="https://twitter.com/ezrak1e">Ezrak1e</a> pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-96245 Out-of-bounds Read 10378 10379 10483 10543 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10852 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10852 Important 10378 Important 10379 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10852 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Network Policy Server (NPS) Information Disclosure Vulnerability <p>Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Network Policy Server (NPS) Microsoft Yes CVE-2026-96246 Out-of-bounds Read 20853 10378 10379 10483 10543 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 10852 Information Disclosure 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 10852 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 10852 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel-Mode Drivers Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could disclose uninitialized heap memory from a privileged process.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2026-96247 Use of Uninitialized Resource 10483 10543 10853 10816 10855 11568 11569 11571 11929 11930 11931 12099 12098 12097 11923 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10852 11572 11924 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10852 Information Disclosure 11572 Information Disclosure 11924 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10852 Important 11572 Important 11924 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Host Guardian Service Denial of Service Vulnerability <p>Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network.</p> Windows Host Guardian Service Microsoft Yes CVE-2026-96248 Stack-based Buffer Overflow 10852 10853 10816 10855 11568 11569 11571 11572 11923 11924 12436 12437 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12436 Denial of Service 12437 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 bccc95a61a3cc79d7b2c4423c808f744 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability <p>Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-96249 Use After Free 21945 21946 20438 12436 12437 12389 12390 20437 20854 20853 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20438 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 21945 Important 21946 Important 20438 Important 12436 Important 12437 Important 12389 Important 12390 Important 20437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20438 12389 12390 20437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Print Driver Microsoft Yes CVE-2026-96250 Use After Free 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Yuki Chen using GLM from z.ai (https://z.ai) 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PowerShell Remote Code Execution Vulnerability <p>Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Microsoft PowerShell Microsoft Yes CVE-2026-96251 Reliance on Untrusted Inputs in a Security Decision 12262 21227 16787 Remote Code Execution 12262 Remote Code Execution 21227 Remote Code Execution 16787 Important 12262 Important 21227 Important 16787 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12262 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21227 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16787 Release Notes https://github.com/PowerShell/PowerShell/releases/tag/v7.4.21 12262 Maybe Security Update 7.4.21 https://github.com/PowerShell/Announcements/blob/main/pwsh/2026/10/CVE-2026-96251.md 12262 Release Notes Release Notes https://github.com/PowerShell/PowerShell/releases/tag/v7.6.8 21227 Maybe Security Update 7.6.8 https://github.com/PowerShell/Announcements/blob/main/pwsh/2026/10/CVE-2026-96251.md 21227 Release Notes Release Notes https://github.com/PowerShell/PowerShell/releases/tag/v7.5.12 16787 Maybe Security Update 7.5.12 https://github.com/PowerShell/Announcements/blob/main/pwsh/2026/10/CVE-2026-96251.md 16787 Release Notes <a href="https://linkedin.com/in/weeraphat-srisutham">Weeraphat Srisutham</a> <a href="https://www.linkedin.com/in/fcripolles/">Francisco Jos&#233; Carot Ripoll&#233;s (RipFran)</a> with <a href="https://www.linkedin.com/company/kpmg-espana/">KPMG Spain</a> Anonymous hwiseong Coşkun Bağrıa&#231;ık Raffaello Tamagnini <a href="https://www.linkedin.com/in/hyunalee0327/">Hyuna Lee</a> <a href="https://imap143.com/">Myungyong Lee</a> <a href="https://x.com/idanmasas">Idan Masas</a> with <a href="https://masastechnologies.com/">Masas Technologies, LLC</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-22T07:00:00 <p>Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only.</p> Active Directory Federation Services (AD FS) Spoofing Vulnerability <p>Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could relay a validly signed SAML response intended for a different endpoint to an affected AD FS endpoint. Successful exploitation could allow the attacker to create an unauthorized session and obtain tokens. No user interaction is required.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-96252 Improper Verification of Cryptographic Signature 10378 10379 10483 10543 10816 10855 11571 11572 11923 11924 12436 12437 10852 10853 11568 11569 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Spoofing 10816 Spoofing 10855 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 12436 Spoofing 12437 Spoofing 10852 Spoofing 10853 Spoofing 11568 Spoofing 11569 Important 10378 Important 10379 Important 10483 Important 10543 Important 10816 Important 10855 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Important 10852 Important 10853 Important 11568 Important 11569 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10378 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10379 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10543 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11924 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 10852 10853 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Print Driver Microsoft Yes CVE-2026-96253 Use After Free 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 AIフィジカルインターフェイス二号機 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Print Driver Microsoft Yes CVE-2026-96254 Use After Free 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Yuki Chen using GLM from z.ai (https://z.ai) 1.0 2026-10-13T07:00:00 <p>Information published.</p> RPC Endpoint Mapper Service Denial of Service Vulnerability <p>Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.</p> RPC Endpoint Mapper Service Microsoft Yes CVE-2026-96300 Allocation of Resources Without Limits or Throttling 21945 21946 10378 10853 10816 11571 11931 12098 12097 11923 11924 12242 12243 12389 12436 20853 10379 10483 10543 10852 10855 11568 11569 11572 11929 11930 12099 12390 20437 20438 12437 20854 Denial of Service 21945 Denial of Service 21946 Denial of Service 10378 Denial of Service 10853 Denial of Service 10816 Denial of Service 11571 Denial of Service 11931 Denial of Service 12098 Denial of Service 12097 Denial of Service 11923 Denial of Service 11924 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12436 Denial of Service 20853 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 10852 Denial of Service 10855 Denial of Service 11568 Denial of Service 11569 Denial of Service 11572 Denial of Service 11929 Denial of Service 11930 Denial of Service 12099 Denial of Service 12390 Denial of Service 20437 Denial of Service 20438 Denial of Service 12437 Denial of Service 20854 Important 21945 Important 21946 Important 10378 Important 10853 Important 10816 Important 11571 Important 11931 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12436 Important 20853 Important 10379 Important 10483 Important 10543 Important 10852 Important 10855 Important 11568 Important 11569 Important 11572 Important 11929 Important 11930 Important 12099 Important 12390 Important 20437 Important 20438 Important 12437 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 12389 12390 20437 20438 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10852 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10852 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10852 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11568 11569 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11568 11569 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11568 11569 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11931 11929 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11931 11929 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11931 12098 12097 11929 11930 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12098 12097 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12098 12097 12099 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 Aman Gupta 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows USB Print Driver Microsoft Yes CVE-2026-96301 Use After Free 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Yuki Chen using GLM from z.ai (https://z.ai) 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-96302 Use After Free 12436 12437 20854 20853 10378 10379 10483 10543 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 10852 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 10852 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 10852 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft PowerShell Security Feature Bypass Vulnerability <p>Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass Windows Defender Application Control and PowerShell Constrained Language Mode restrictions, allowing untrusted code to run with capabilities those protections are designed to block.</p> Microsoft PowerShell Microsoft Yes CVE-2026-96303 Improperly Implemented Security Check for Standard 16787 12262 21227 Security Feature Bypass 16787 Security Feature Bypass 12262 Security Feature Bypass 21227 Important 16787 Important 12262 Important 21227 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 16787 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12262 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21227 Release Notes https://github.com/PowerShell/PowerShell/releases/tag/v7.5.12 16787 Maybe Security Update 7.5.12 https://github.com/PowerShell/Announcements/blob/main/pwsh/2026/10/CVE-2026-96303.md 16787 Release Notes Release Notes https://github.com/PowerShell/PowerShell/releases/tag/v7.4.21 12262 Maybe Security Update 7.4.21 https://github.com/PowerShell/Announcements/blob/main/pwsh/2026/10/CVE-2026-96303.md 12262 Release Notes Release Notes https://github.com/PowerShell/PowerShell/releases/tag/v7.6.8 21227 Maybe Security Update 7.6.8 https://github.com/PowerShell/Announcements/blob/main/pwsh/2026/10/CVE-2026-96303.md 21227 Release Notes <a href="https://www.linkedin.com/in/moathaloufi/">Moath Aloufi</a> <a href="https://www.linkedin.com/in/nguyen-hoang-quoc-an-009863267/">kayiz</a> with <a href="https://lp.com.vn/">Lien Phat Technology Corporation</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-22T07:00:00 <p>Corrected Fixed Build Number and Download links in the Security Updates table. This is an informational change only.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows USB Print Driver Microsoft Yes CVE-2026-96304 Use After Free 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Yuki Chen using GLM from z.ai (https://z.ai) 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-96305 Use After Free 10378 10379 10483 10543 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10852 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10852 Important 10378 Important 10379 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10852 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Sysmain Service Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Sysmain Service Microsoft Yes CVE-2026-96306 Out-of-bounds Read 10852 10855 11571 11572 11929 11930 12098 12097 12242 20437 20853 10853 10816 11568 11569 11931 12099 12243 12389 12390 20438 20854 21945 21946 Elevation of Privilege 10852 Elevation of Privilege 10855 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 20437 Elevation of Privilege 20853 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20438 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 10852 Important 10855 Important 11571 Important 11572 Important 11929 Important 11930 Important 12098 Important 12097 Important 12242 Important 20437 Important 20853 Important 10853 Important 10816 Important 11568 Important 11569 Important 11931 Important 12099 Important 12243 Important 12389 Important 12390 Important 20438 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10855 10853 10816 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10855 10853 10816 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10855 10853 10816 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 12098 12097 11931 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12098 12097 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12098 12097 12099 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://support.microsoft.com/help/5127648 20437 12389 12390 20438 21945 21946 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 sweetchip Daejin Lee 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Installer Microsoft Yes CVE-2026-96307 Use After Free 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 12242 12243 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 12242 Elevation of Privilege 12243 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 12242 Important 12243 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-96308 Use After Free 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Subsystem for Linux Elevation of Privilege Vulnerability <p>Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Subsystem for Linux Microsoft Yes CVE-2026-96309 Use After Free 11929 11931 12099 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 11930 12098 Elevation of Privilege 11929 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 11930 Elevation of Privilege 12098 Important 11929 Important 11931 Important 12099 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 11930 Important 12098 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11931 12099 12097 11930 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Yuki Chen using GLM from z.ai (https://z.ai) 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows USB Print Driver Microsoft Yes CVE-2026-96310 Use After Free 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Yuki Chen using GLM from z.ai (https://z.ai) 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Network List Service Tampering Vulnerability <p>Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.</p> Windows Network List Service Microsoft Yes CVE-2026-96311 Missing Authorization 10852 10853 11568 11569 11572 12098 12097 12390 20437 12436 10483 10543 10816 10855 11571 11929 11930 11931 12099 11923 11924 12242 12243 12389 20438 12437 20854 20853 21945 21946 Tampering 10852 Tampering 10853 Tampering 11568 Tampering 11569 Tampering 11572 Tampering 12098 Tampering 12097 Tampering 12390 Tampering 20437 Tampering 12436 Tampering 10483 Tampering 10543 Tampering 10816 Tampering 10855 Tampering 11571 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12099 Tampering 11923 Tampering 11924 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 20438 Tampering 12437 Tampering 20854 Tampering 20853 Tampering 21945 Tampering 21946 Important 10852 Important 10853 Important 11568 Important 11569 Important 11572 Important 12098 Important 12097 Important 12390 Important 20437 Important 12436 Important 10483 Important 10543 Important 10816 Important 10855 Important 11571 Important 11929 Important 11930 Important 11931 Important 12099 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 20438 Important 12437 Important 20854 Important 20853 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11572 11571 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11572 11571 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11572 11571 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12098 12097 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12098 12097 12099 5126657 5126657 https://support.microsoft.com/help/5126657 12098 12097 11929 11930 11931 12099 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 20437 12389 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 LC with VGCO - Future Labs yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-96312 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Anonymous insu (@hpy_insu) of Theori, with Xint 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Push Notifications Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Push Notifications Microsoft Yes CVE-2026-96313 Missing Authentication for Critical Function 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 jsane 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Audio Service Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Audio Service Microsoft Yes CVE-2026-96314 Out-of-bounds Read 10483 10543 10852 10853 10855 11568 11569 11571 11929 11931 12099 12098 11924 12242 12243 12389 20437 12436 20854 10378 10379 10816 11572 11930 12097 11923 12390 20438 12437 20853 21945 21946 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11929 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 20437 Information Disclosure 12436 Information Disclosure 20854 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10816 Information Disclosure 11572 Information Disclosure 11930 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 12390 Information Disclosure 20438 Information Disclosure 12437 Information Disclosure 20853 Information Disclosure 21945 Information Disclosure 21946 Important 10483 Important 10543 Important 10852 Important 10853 Important 10855 Important 11568 Important 11569 Important 11571 Important 11929 Important 11931 Important 12099 Important 12098 Important 11924 Important 12242 Important 12243 Important 12389 Important 20437 Important 12436 Important 20854 Important 10378 Important 10379 Important 10816 Important 11572 Important 11930 Important 12097 Important 11923 Important 12390 Important 20438 Important 12437 Important 20853 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10855 10816 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10855 10816 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10855 10816 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11931 12099 12098 11930 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 5126655 https://support.microsoft.com/help/5126655 11924 11923 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 20437 12390 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/heegong123">HeeChan Kim</a> with <a href="https://h4c.team/">TeamH4C</a> Vu Van Tien (@n0_Be3r) 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Overlay Filter Tampering Vulnerability <p>Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally.</p> Windows Overlay Filter Microsoft Yes CVE-2026-96315 Missing Authorization 10852 10853 10816 10855 11569 11571 11572 11930 11931 12097 11924 12243 12389 12390 20437 12436 12437 20854 11568 11929 12099 12098 11923 12242 20438 20853 21945 21946 Tampering 10852 Tampering 10853 Tampering 10816 Tampering 10855 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 11924 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 20437 Tampering 12436 Tampering 12437 Tampering 20854 Tampering 11568 Tampering 11929 Tampering 12099 Tampering 12098 Tampering 11923 Tampering 12242 Tampering 20438 Tampering 20853 Tampering 21945 Tampering 21946 Important 10852 Important 10853 Important 10816 Important 10855 Important 11569 Important 11571 Important 11572 Important 11930 Important 11931 Important 12097 Important 11924 Important 12243 Important 12389 Important 12390 Important 20437 Important 12436 Important 12437 Important 20854 Important 11568 Important 11929 Important 12099 Important 12098 Important 11923 Important 12242 Important 20438 Important 20853 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11569 11571 11572 11568 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11569 11571 11572 11568 5126651 5126651 https://support.microsoft.com/help/5126651 11569 11571 11572 11568 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11930 11931 11929 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11930 11931 11929 5126657 5126657 https://support.microsoft.com/help/5126657 11930 11931 12097 11929 12099 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12099 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12099 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 5126655 https://support.microsoft.com/help/5126655 11924 11923 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability <p>Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-96316 Missing Authorization 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Tampering 10378 Tampering 10379 Tampering 10483 Tampering 10543 Tampering 10852 Tampering 10853 Tampering 10816 Tampering 10855 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12099 Tampering 12098 Tampering 12097 Tampering 11923 Tampering 11924 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 20437 Tampering 20438 Tampering 21945 Tampering 21946 Tampering 12436 Tampering 12437 Tampering 20854 Tampering 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-96317 Use After Free 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 insu (@hpy_insu) of Theori, with Xint 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Resume Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Resume Microsoft Yes CVE-2026-96318 Heap-based Buffer Overflow 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11930 12099 12098 11924 12243 12389 12390 20437 20438 12436 12437 20853 10378 11929 11931 12097 11923 12242 20854 21945 21946 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11930 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 10378 Elevation of Privilege 11929 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 12242 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11930 Important 12099 Important 12098 Important 11924 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 12436 Important 12437 Important 20853 Important 10378 Important 11929 Important 11931 Important 12097 Important 11923 Important 12242 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10379 10378 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10379 10378 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11930 11929 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11930 11929 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11930 12099 12098 11929 11931 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 5126655 https://support.microsoft.com/help/5126655 11924 11923 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://github.com/zeze-zeze">Zeze</a> with <a href="https://www.txone.com/">TXOne</a> <a href="https://z.ai/">Yuki Chen using GLM from z.ai</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows USB Print Driver Microsoft Yes CVE-2026-96319 Use After Free 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows DHCP Server Microsoft Yes CVE-2026-96320 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11923 11924 12436 12437 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12436 Remote Code Execution 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Display Driver Information Disclosure Vulnerability <p>Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Remote Desktop Display Driver Microsoft Yes CVE-2026-96321 Out-of-bounds Read 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Remote Desktop Protocol Elevation of Privilege Vulnerability <p>Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Remote Desktop Protocol Microsoft Yes CVE-2026-96322 Use After Free 10378 10379 10483 10543 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10852 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10852 Important 10378 Important 10379 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10852 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Elevation of Privilege Vulnerability <p>Use after free in Windows Update allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Update Microsoft Yes CVE-2026-96323 Use After Free 11930 11931 12099 12097 11923 11924 12243 12389 12390 12436 12437 20853 11929 12098 12242 20437 20438 20854 21945 21946 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 11929 Elevation of Privilege 12098 Elevation of Privilege 12242 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11930 Important 11931 Important 12099 Important 12097 Important 11923 Important 11924 Important 12243 Important 12389 Important 12390 Important 12436 Important 12437 Important 20853 Important 11929 Important 12098 Important 12242 Important 20437 Important 20438 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11930 11931 11929 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11930 11931 11929 5126657 5126657 https://support.microsoft.com/help/5126657 11930 11931 12099 12097 11929 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-96324 Use After Free 10378 10483 10543 10816 11568 11569 11571 11572 11929 11930 11931 12098 11924 12242 12243 12390 20437 20438 12436 20854 20853 10379 10852 10853 10855 12099 12097 11923 12389 12437 21945 21946 Elevation of Privilege 10378 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10816 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12098 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12436 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10379 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10855 Elevation of Privilege 12099 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 12389 Elevation of Privilege 12437 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 10378 Important 10483 Important 10543 Important 10816 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12098 Important 11924 Important 12242 Important 12243 Important 12390 Important 20437 Important 20438 Important 12436 Important 20854 Important 20853 Important 10379 Important 10852 Important 10853 Important 10855 Important 12099 Important 12097 Important 11923 Important 12389 Important 12437 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10852 10853 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10852 10853 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10852 10853 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12098 12099 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12098 12099 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12098 12099 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 5126655 https://support.microsoft.com/help/5126655 11924 11923 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 20437 20438 12389 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows SMB Server Denial of Service Vulnerability <p>Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network.</p> Windows SMB Server Microsoft Yes CVE-2026-96325 Missing Reference to Active Allocated Resource 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12099 Denial of Service 12098 Denial of Service 12097 Denial of Service 11923 Denial of Service 11924 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 20437 Denial of Service 20438 Denial of Service 21945 Denial of Service 21946 Denial of Service 12436 Denial of Service 12437 Denial of Service 20854 Denial of Service 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> WebDAV Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could create or delete files in the security context of the “NT AUTHORITY\ LOCAL SERVICE” account.</p> WebDAV Microsoft Yes CVE-2026-96843 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Bluetooth Driver Elevation of Privilege Vulnerability <p>Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Bluetooth Driver Microsoft Yes CVE-2026-96844 Integer Underflow (Wrap or Wraparound) 10378 10379 10853 11568 11569 11571 11572 11929 11930 11931 12099 11923 12242 12243 12389 12390 20437 20438 12436 20854 10483 10543 10852 10816 10855 12098 12097 11924 12437 20853 21945 21946 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 11923 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12436 Elevation of Privilege 20854 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 10378 Important 10379 Important 10853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 11923 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 12436 Important 20854 Important 10483 Important 10543 Important 10852 Important 10816 Important 10855 Important 12098 Important 12097 Important 11924 Important 12437 Important 20853 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10852 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10852 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10852 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> [fanxiaocao](https://x.com/TinySecEx) and [pjf](https://weibo.com/jfpan) 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> WebDAV Information Disclosure Vulnerability <p>Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> WebDAV Microsoft Yes CVE-2026-96846 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> WebDAV Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could create or delete files in the security context of the “NT AUTHORITY\ LOCAL SERVICE” account.</p> WebDAV Microsoft Yes CVE-2026-96847 Untrusted Pointer Dereference 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Information Disclosure Vulnerability <p>Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-96848 Buffer Over-read 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12436 12437 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12436 Information Disclosure 12437 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel-Mode Drivers Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2026-96849 Use of Uninitialized Resource 20854 20853 Information Disclosure 20854 Information Disclosure 20853 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 pwn2addr <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Modern Device Management (MDM) Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Modern Device Management (MDM) Microsoft Yes CVE-2026-96850 Use of Uninitialized Resource Improper Null Termination 21946 12436 12437 20854 20853 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5127648 https://support.microsoft.com/help/5127648 21946 12389 12390 20437 20438 21945 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Management Instrumentation Information Disclosure Vulnerability <p>Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Management Instrumentation Microsoft Yes CVE-2026-96851 Buffer Over-read 10379 10483 10543 10816 10855 11569 11571 11931 11923 12242 12389 12390 20437 20853 10378 10852 10853 11568 11572 11929 11930 12099 12098 12097 11924 12243 20438 12436 12437 20854 21945 21946 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11931 Information Disclosure 11923 Information Disclosure 12242 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20853 Information Disclosure 10378 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 11568 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11924 Information Disclosure 12243 Information Disclosure 20438 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 10379 Important 10483 Important 10543 Important 10816 Important 10855 Important 11569 Important 11571 Important 11931 Important 11923 Important 12242 Important 12389 Important 12390 Important 20437 Important 20853 Important 10378 Important 10852 Important 10853 Important 11568 Important 11572 Important 11929 Important 11930 Important 12099 Important 12098 Important 12097 Important 11924 Important 12243 Important 20438 Important 12436 Important 12437 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10379 10378 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10379 10378 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 10852 10853 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11569 11571 11568 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11569 11571 11568 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11569 11571 11568 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11931 11929 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11931 11929 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11931 11929 11930 12099 12098 12097 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows TCP/IP Elevation of Privilege Vulnerability <p>Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows TCP/IP Microsoft Yes CVE-2026-96852 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://x.com/pwnstar96">hoon</a> with <a href="https://78researchlab.com/">78researchlab</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Information Disclosure Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Win32 Kernel Subsystem Microsoft Yes CVE-2026-96853 Time-of-check Time-of-use (TOCTOU) Race Condition 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Device Association Service Information Disclosure Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Device Association Service Microsoft Yes CVE-2026-96854 Access of Resource Using Incompatible Type ('Type Confusion') 10483 10852 10853 10816 10855 11572 11929 11931 11923 12242 12243 12389 12436 12437 20854 20853 10543 11568 11569 11571 11930 12099 12098 12097 11924 12390 20437 20438 21945 21946 Information Disclosure 10483 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11931 Information Disclosure 11923 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11930 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11924 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Important 10483 Important 10852 Important 10853 Important 10816 Important 10855 Important 11572 Important 11929 Important 11931 Important 11923 Important 12242 Important 12243 Important 12389 Important 12436 Important 12437 Important 20854 Important 20853 Important 10543 Important 11568 Important 11569 Important 11571 Important 11930 Important 12099 Important 12098 Important 12097 Important 11924 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11572 11568 11569 11571 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11572 11568 11569 11571 5126651 5126651 https://support.microsoft.com/help/5126651 11572 11568 11569 11571 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11931 11930 12099 12098 12097 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Modern Device Management (MDM) Tampering Vulnerability <p>Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.</p> Windows Modern Device Management (MDM) Microsoft Yes CVE-2026-96855 Missing Authorization 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 20854 20853 11923 12437 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12099 Tampering 12098 Tampering 12097 Tampering 11924 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 20437 Tampering 20438 Tampering 21945 Tampering 21946 Tampering 12436 Tampering 20854 Tampering 20853 Tampering 11923 Tampering 12437 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 20854 Important 20853 Important 11923 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 5126655 https://support.microsoft.com/help/5126655 11924 11923 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Management Instrumentation Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could execute code in the security context of the “NT AUTHORITY\Network Service” account.</p> Windows Management Instrumentation Microsoft Yes CVE-2026-96856 Heap-based Buffer Overflow 10378 10483 10543 10852 10853 10855 11569 11572 12097 12243 12389 20438 12437 20854 10379 10816 11568 11571 11929 11930 11931 12099 12098 11923 11924 12242 12390 20437 12436 20853 21945 21946 Elevation of Privilege 10378 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10855 Elevation of Privilege 11569 Elevation of Privilege 11572 Elevation of Privilege 12097 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 20438 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 10379 Elevation of Privilege 10816 Elevation of Privilege 11568 Elevation of Privilege 11571 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 10378 Important 10483 Important 10543 Important 10852 Important 10853 Important 10855 Important 11569 Important 11572 Important 12097 Important 12243 Important 12389 Important 20438 Important 12437 Important 20854 Important 10379 Important 10816 Important 11568 Important 11571 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 11923 Important 11924 Important 12242 Important 12390 Important 20437 Important 12436 Important 20853 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10855 10816 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10855 10816 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10855 10816 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11569 11572 11568 11571 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11569 11572 11568 11571 5126651 5126651 https://support.microsoft.com/help/5126651 11569 11572 11568 11571 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12099 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12099 12098 5126657 5126657 https://support.microsoft.com/help/5126657 12097 11929 11930 11931 12099 12098 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 20438 12390 20437 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Projected File System Information Disclosure Vulnerability <p>Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p> Windows Projected File System Microsoft Yes CVE-2026-96857 Files or Directories Accessible to External Parties 21945 21946 11569 11572 11930 11931 12098 11923 12389 12436 20854 20853 11568 11571 11929 12099 12097 11924 12242 12243 12390 20437 20438 12437 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11569 Information Disclosure 11572 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12098 Information Disclosure 11923 Information Disclosure 12389 Information Disclosure 12436 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 11568 Information Disclosure 11571 Information Disclosure 11929 Information Disclosure 12099 Information Disclosure 12097 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12437 Important 21945 Important 21946 Important 11569 Important 11572 Important 11930 Important 11931 Important 12098 Important 11923 Important 12389 Important 12436 Important 20854 Important 20853 Important 11568 Important 11571 Important 11929 Important 12099 Important 12097 Important 11924 Important 12242 Important 12243 Important 12390 Important 20437 Important 20438 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 12389 12390 20437 20438 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11569 11572 11568 11571 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11569 11572 11568 11571 5126651 5126651 https://support.microsoft.com/help/5126651 11569 11572 11568 11571 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11930 11931 11929 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11930 11931 11929 5126657 5126657 https://support.microsoft.com/help/5126657 11930 11931 12098 11929 12099 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12098 12099 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12098 12099 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Security Account Manager Tampering Vulnerability <p>Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally.</p> Windows Security Account Manager Microsoft Yes CVE-2026-96858 Missing Authentication for Critical Function 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12099 Tampering 12098 Tampering 12097 Tampering 11923 Tampering 11924 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 20437 Tampering 20438 Tampering 21945 Tampering 21946 Tampering 12436 Tampering 12437 Tampering 20854 Tampering 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Imaging Component Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Imaging Component Microsoft Yes CVE-2026-96859 Out-of-bounds Read 21945 21946 12436 20854 20853 10378 10379 10483 10543 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11924 12242 12243 12389 12390 20437 20438 10852 11923 12437 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 10852 Information Disclosure 11923 Information Disclosure 12437 Important 21945 Important 21946 Important 12436 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 10852 Important 11923 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 12389 12390 20437 20438 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 5126655 https://support.microsoft.com/help/5126655 11924 11923 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 <a href="https://x.com/jiri123_eth">Jiri</a> with <a href="https://cantina.xyz/">Cantina</a> Unbbal 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows USB Print Driver Information Disclosure Vulnerability <p>Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows USB Print Driver Microsoft Yes CVE-2026-96860 Out-of-bounds Read Improper Null Termination 10379 10543 10853 10816 11569 11572 11930 11931 12098 11923 12390 20437 20438 20853 10378 10483 10852 10855 11568 11571 11929 12099 12097 11924 12242 12243 12389 12436 12437 20854 21945 21946 Information Disclosure 10379 Information Disclosure 10543 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 11569 Information Disclosure 11572 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12098 Information Disclosure 11923 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 20853 Information Disclosure 10378 Information Disclosure 10483 Information Disclosure 10852 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11571 Information Disclosure 11929 Information Disclosure 12099 Information Disclosure 12097 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 10379 Important 10543 Important 10853 Important 10816 Important 11569 Important 11572 Important 11930 Important 11931 Important 12098 Important 11923 Important 12390 Important 20437 Important 20438 Important 20853 Important 10378 Important 10483 Important 10852 Important 10855 Important 11568 Important 11571 Important 11929 Important 12099 Important 12097 Important 11924 Important 12242 Important 12243 Important 12389 Important 12436 Important 12437 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10379 10378 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10379 10378 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10543 10483 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10543 10483 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10852 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10852 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10852 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11569 11572 11568 11571 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11569 11572 11568 11571 5126651 5126651 https://support.microsoft.com/help/5126651 11569 11572 11568 11571 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11930 11931 11929 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11930 11931 11929 5126657 5126657 https://support.microsoft.com/help/5126657 11930 11931 12098 11929 12099 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12098 12099 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12098 12099 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 20437 20438 12389 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 <a href="https://x.com/clearbluejar">John McIntosh (clearbluejar)</a> with <a href="https://clearseclabs.com/">CLEARSECLABS LLC</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Network Device Enrollment Service (NDES) Denial of Service Vulnerability <p>Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.</p> Network Device Enrollment Service (NDES) Microsoft Yes CVE-2026-96861 Out-of-bounds Read 10378 10379 10852 10853 10816 12436 10483 10543 10855 11568 11569 11571 11572 11923 11924 12437 Denial of Service 10378 Denial of Service 10379 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 12436 Denial of Service 10483 Denial of Service 10543 Denial of Service 10855 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Important 10378 Important 10379 Important 10852 Important 10853 Important 10816 Important 12436 Important 10483 Important 10543 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Spaceport.sys Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Spaceport.sys Microsoft Yes CVE-2026-96862 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg &amp; 2st</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Port Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Port Driver Microsoft Yes CVE-2026-96863 Heap-based Buffer Overflow 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://x.com/hototogisutian">Thanatos Tian (HKPolyU) &amp; wgg</a> with https://diffract-ai.com/ <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability <p>Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Microsoft Failover Cluster Virtual Driver Microsoft Yes CVE-2026-96864 Double Free 10378 10483 10543 10852 10853 10816 10855 11568 11569 11572 12436 12437 10379 11571 11923 11924 Remote Code Execution 10378 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11572 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 10379 Remote Code Execution 11571 Remote Code Execution 11923 Remote Code Execution 11924 Important 10378 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11572 Important 12436 Important 12437 Important 10379 Important 11571 Important 11923 Important 11924 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11572 11571 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11572 11571 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11572 11571 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 41ae55e9310ff27fa6f26af4727e5590 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Secure Kernel Mode Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Secure Kernel Mode Microsoft Yes CVE-2026-96865 Exposure of Sensitive System Information to an Unauthorized Control Sphere 12099 12097 12098 11923 11924 12243 12242 12390 12389 20438 20437 21946 21945 12436 12437 20853 20854 10852 10853 10816 10855 11568 11569 11571 11572 11929 11931 11930 Information Disclosure 12099 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12243 Information Disclosure 12242 Information Disclosure 12390 Information Disclosure 12389 Information Disclosure 20438 Information Disclosure 20437 Information Disclosure 21946 Information Disclosure 21945 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11931 Information Disclosure 11930 Important 12099 Important 12097 Important 12098 Important 11923 Important 11924 Important 12243 Important 12242 Important 12390 Important 12389 Important 20438 Important 20437 Important 21946 Important 21945 Important 12436 Important 12437 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11931 Important 11930 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126657 https://support.microsoft.com/help/5126657 12099 12097 12098 11929 11931 11930 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 12389 20438 20437 21946 21945 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 <a href="https://x.com/vmpr0be">vmpr0be</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Network Device Enrollment Service (NDES) Denial of Service Vulnerability <p>Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.</p> Network Device Enrollment Service (NDES) Microsoft Yes CVE-2026-96866 Out-of-bounds Read 10378 10379 10853 10816 11568 12436 10483 10543 10852 10855 11569 11571 11572 11923 11924 12437 Denial of Service 10378 Denial of Service 10379 Denial of Service 10853 Denial of Service 10816 Denial of Service 11568 Denial of Service 12436 Denial of Service 10483 Denial of Service 10543 Denial of Service 10852 Denial of Service 10855 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Important 10378 Important 10379 Important 10853 Important 10816 Important 11568 Important 12436 Important 10483 Important 10543 Important 10852 Important 10855 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10852 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10852 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10852 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-96867 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kernel Microsoft Yes CVE-2026-96868 Heap-based Buffer Overflow 12389 12390 20437 20438 21945 21946 12436 12437 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows BitLocker Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows BitLocker Microsoft Yes CVE-2026-96909 Heap-based Buffer Overflow 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Information Disclosure Vulnerability <p>Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-96910 Untrusted Pointer Dereference 10378 10816 10855 11568 11571 11572 11929 12099 12098 11923 11924 12243 12389 12390 20437 20438 20853 10379 10483 10543 10852 10853 11569 11930 11931 12097 12242 12436 12437 20854 21945 21946 Information Disclosure 10378 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 20853 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 11569 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12242 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 21945 Information Disclosure 21946 Important 10378 Important 10816 Important 10855 Important 11568 Important 11571 Important 11572 Important 11929 Important 12099 Important 12098 Important 11923 Important 11924 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 20853 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 11569 Important 11930 Important 11931 Important 12097 Important 12242 Important 12436 Important 12437 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10816 10855 10852 10853 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126868 5126868 https://support.microsoft.com/help/5126868 10816 10855 10852 10853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11571 11572 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11571 11572 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11571 11572 11569 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 12099 12098 11930 11931 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 sweetchip 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-96911 Improper Link Resolution Before File Access ('Link Following') 12389 12390 20437 20438 21945 21946 12436 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11931 11930 12099 12097 12098 11923 11924 12243 12437 20853 20854 12242 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11931 Elevation of Privilege 11930 Elevation of Privilege 12099 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 12242 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11931 Important 11930 Important 12099 Important 12097 Important 12098 Important 11923 Important 11924 Important 12243 Important 12437 Important 20853 Important 20854 Important 12242 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11931 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11931 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11931 11930 12099 12097 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 <a href="https://x.com/heegong123">HeeChan Kim</a> with <a href="https://h4c.team/">TeamH4C</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Client License Service Elevation of Privilege Vulnerability <p>Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Client License Service Microsoft Yes CVE-2026-96912 Use After Free 20438 21945 21946 12436 12437 20854 20853 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5127648 https://support.microsoft.com/help/5127648 20438 21945 21946 12389 12390 20437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC Killer Queen Killer Queen 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-27T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-96913 Heap-based Buffer Overflow 12389 12390 20437 20438 21945 21946 12436 12437 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 20854 20853 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 20854 Elevation of Privilege 20853 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Artur Stetsko Anonymous 1.1 2026-10-20T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Virtualization-Based Security (VBS) Enclave Microsoft Yes CVE-2026-96914 Integer Overflow or Wraparound Heap-based Buffer Overflow 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 <a href="https://x.com/vmpr0be">vmpr0be</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2026-96915 Integer Overflow or Wraparound 21945 21946 10378 10483 10853 10855 11568 11571 12099 12098 11924 12243 20437 20438 12436 20854 20853 10379 10543 10852 10816 11569 11572 11929 11930 11931 12097 11923 12242 12389 12390 12437 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 10378 Elevation of Privilege 10483 Elevation of Privilege 10853 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11571 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12436 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10379 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10816 Elevation of Privilege 11569 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 12242 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12437 Important 21945 Important 21946 Important 10378 Important 10483 Important 10853 Important 10855 Important 11568 Important 11571 Important 12099 Important 12098 Important 11924 Important 12243 Important 20437 Important 20438 Important 12436 Important 20854 Important 20853 Important 10379 Important 10543 Important 10852 Important 10816 Important 11569 Important 11572 Important 11929 Important 11930 Important 11931 Important 12097 Important 11923 Important 12242 Important 12389 Important 12390 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10855 10852 10816 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10855 10852 10816 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10855 10852 10816 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11571 11569 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11571 11569 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11571 11569 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126657 https://support.microsoft.com/help/5126657 12099 12098 11929 11930 11931 12097 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11924 11923 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11924 11923 5126655 5126655 https://support.microsoft.com/help/5126655 11924 11923 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU)</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-96916 Heap-based Buffer Overflow 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11931 11929 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11931 11929 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11931 12099 12098 12097 11929 11930 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; wgg &amp; 2st</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows PCI Bus Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows PCI Bus Driver Microsoft Yes CVE-2026-96917 Heap-based Buffer Overflow 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-96918 Incorrect Authorization 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-96919 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11569 11931 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 11568 11571 11572 11929 11930 12099 12098 Elevation of Privilege 11569 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 11568 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 12099 Elevation of Privilege 12098 Important 11569 Important 11931 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Important 11568 Important 11571 Important 11572 Important 11929 Important 11930 Important 12099 Important 12098 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11569 11568 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11569 11568 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11569 11568 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11931 11929 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11931 11929 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11931 12097 11929 11930 12099 12098 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12099 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12099 12098 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Program Compatibility Assistant Service Microsoft Yes CVE-2026-96920 Heap-based Buffer Overflow 11930 12099 12097 12098 11923 11924 12243 12242 12390 12389 20438 20437 21946 21945 12436 12437 20853 20854 10852 10853 10816 10855 11568 11569 11571 11572 11929 11931 Elevation of Privilege 11930 Elevation of Privilege 12099 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 12242 Elevation of Privilege 12390 Elevation of Privilege 12389 Elevation of Privilege 20438 Elevation of Privilege 20437 Elevation of Privilege 21946 Elevation of Privilege 21945 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11931 Important 11930 Important 12099 Important 12097 Important 12098 Important 11923 Important 11924 Important 12243 Important 12242 Important 12390 Important 12389 Important 20438 Important 20437 Important 21946 Important 21945 Important 12436 Important 12437 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11930 11929 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11930 11929 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11930 12099 12097 12098 11929 11931 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12097 12098 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12097 12098 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 12389 20438 20437 21946 21945 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 TunSk & Zhiniang Peng 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Message Queuing Queue Manager Information Disclosure Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Message Queuing Queue Manager Microsoft Yes CVE-2026-96921 Access of Resource Using Incompatible Type ('Type Confusion') 10378 10379 10483 10543 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10852 12242 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10852 Information Disclosure 12242 Important 10378 Important 10379 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10852 Important 12242 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Workstation Service Elevation of Privilege Vulnerability <p>Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Workstation Service Microsoft Yes CVE-2026-96923 Use After Free 12389 12390 20437 20438 21945 21946 12436 12437 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 20854 20853 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 AIフィジカルインターフェイス二号機 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows OLE Remote Code Execution Vulnerability <p>Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows OLE Microsoft Yes CVE-2026-96924 Untrusted Pointer Dereference 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 David Zhu with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Information Disclosure Vulnerability <p>Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows NTFS Microsoft Yes CVE-2026-96925 Integer Underflow (Wrap or Wraparound) 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Tampering Vulnerability <p>Missing authorization in DNS Server allows an authorized attacker to perform tampering locally.</p> Role: DNS Server Microsoft Yes CVE-2026-96926 Missing Authorization 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11923 11924 12436 12437 Tampering 10378 Tampering 10379 Tampering 10483 Tampering 10543 Tampering 10852 Tampering 10853 Tampering 10816 Tampering 10855 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 12436 Tampering 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 <a href="https://www.linkedin.com/in/sneha-ravichandran/">Sneha Ravichandran</a> with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Information Disclosure Vulnerability <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows NTFS Microsoft Yes CVE-2026-96927 Out-of-bounds Read 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126657 https://support.microsoft.com/help/5126657 12099 12098 12097 11929 11930 11931 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-96928 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://x.com/sangjun_pwn">Sangjun Park</a> with <a href="https://www.enki.co.kr/">ENKI Whitehat</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated local attacker could exploit this vulnerability by supplying specially crafted security information to an affected system. Successful exploitation could allow the attacker to elevate privileges. User interaction is not required.</p> Windows Kernel Microsoft Yes CVE-2026-96929 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous with Microsoft <a href="https://x.com/riprcx">Arjun Vasudeva</a> with MSRC V&amp;M 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-96930 Out-of-bounds Read 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 20437 20438 21945 21946 12389 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-96931 Untrusted Pointer Dereference 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 R4nger, mj with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Embedded Mode Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Embedded Mode Service Microsoft Yes CVE-2026-96932 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10852 10853 10816 10855 11568 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 11568 11569 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 11568 11569 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows COM+ Event System Service Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows COM+ Event System Service Microsoft Yes CVE-2026-96933 Untrusted Pointer Dereference 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 David Zhu with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows DHCP Server Microsoft Yes CVE-2026-96934 Use After Free 10543 10853 10816 10855 11569 11572 12437 10378 10379 10483 10852 11568 11571 11923 11924 12436 Remote Code Execution 10543 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11569 Remote Code Execution 11572 Remote Code Execution 12437 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10852 Remote Code Execution 11568 Remote Code Execution 11571 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12436 Critical 10543 Critical 10853 Critical 10816 Critical 10855 Critical 11569 Critical 11572 Critical 12437 Critical 10378 Critical 10379 Critical 10483 Critical 10852 Critical 11568 Critical 11571 Critical 11923 Critical 11924 Critical 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10543 10483 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10543 10483 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10853 10816 10855 10852 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126868 5126868 https://support.microsoft.com/help/5126868 10853 10816 10855 10852 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11569 11572 11568 11571 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11569 11572 11568 11571 5126651 5126651 https://support.microsoft.com/help/5126651 11569 11572 11568 11571 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 Linzishan, Anemone and Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows NTFS Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows NTFS Microsoft Yes CVE-2026-96935 Exposure of Sensitive System Information to an Unauthorized Control Sphere 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Andy Davis with <a href="https://www.nccgroup.com/research">NCC Group</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Windows Search Component Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-96937 Use After Free 11931 12099 12242 12390 20853 11929 11930 12098 12097 11923 11924 12243 12389 20437 20438 12436 12437 20854 21945 21946 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 21945 Elevation of Privilege 21946 Important 11931 Important 12099 Important 12242 Important 12390 Important 20853 Important 11929 Important 11930 Important 12098 Important 12097 Important 11923 Important 11924 Important 12243 Important 12389 Important 20437 Important 20438 Important 12436 Important 12437 Important 20854 Important 21945 Important 21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11931 11929 11930 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11931 11929 11930 5126657 5126657 https://support.microsoft.com/help/5126657 11931 12099 11929 11930 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12390 12389 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12390 12389 5127648 5127648 https://support.microsoft.com/help/5127648 12390 12389 20437 20438 21945 21946 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 Soufiane El hachmi 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Distributed File System (DFS) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Distributed File System (DFS) Microsoft Yes CVE-2026-96938 Heap-based Buffer Overflow 12389 12390 20437 20438 21945 21946 12436 12437 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 20854 20853 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/si-yeon-wi-b869533b4">wisi</a> daeseong Takuto Tanda with <a href="https://gmo-cybersecurity.com/">GMO Cybersecurity by Ierae, Inc.</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-28T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Servicing Stack Updates Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Servicing Stack Updates Microsoft Yes CVE-2026-96939 Time-of-check Time-of-use (TOCTOU) Race Condition 12243 12242 12389 20438 20437 21946 21945 12436 12437 20853 20854 12390 Elevation of Privilege 12243 Elevation of Privilege 12242 Elevation of Privilege 12389 Elevation of Privilege 20438 Elevation of Privilege 20437 Elevation of Privilege 21946 Elevation of Privilege 21945 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 12390 Important 12243 Important 12242 Important 12389 Important 20438 Important 20437 Important 21946 Important 21945 Important 12436 Important 12437 Important 20853 Important 20854 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 20438 20437 21946 21945 12390 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20438 20437 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20438 20437 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21946 21945 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21946 21945 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 haowei yan haowei yan Zhang WangJunJie with Hillstone Networks Zhang WangJunJie with Hillstone Networks 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p>Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Is Exchange Online affected, and do Exchange Online customers need to take action?</strong></p> <p>Microsoft has already deployed a related service-side fix to Exchange Online. Exchange Online customers do not need to take any action to receive the fix. Customers using affected on-premises Microsoft Exchange Server products should install the applicable security updates listed in the Security Updates table.</p> <p><strong>Where can I find more information?</strong></p> <p>Please see the <a href="https://techcommunity.microsoft.com/blog/exchange/released-september-2026-v2-exchange-server-security-updates/4561718">Exchange blog</a> for more information.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An authenticated attacker who successfully exploited this vulnerability could gain unauthorized access to other users' mailboxes within the same organization and read email messages and attachments. The vulnerability does not allow access across tenant boundaries.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-96940 Weak Authentication 12293 12039 16792 12502 Elevation of Privilege 12293 Elevation of Privilege 12039 Elevation of Privilege 16792 Elevation of Privilege 12502 Important 12293 Important 12039 Important 16792 Important 12502 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12502 5129957 12293 No Security Update 15.02.1544.048 https://support.microsoft.com/help/5129957 12293 5129957 5129957 https://support.microsoft.com/help/5129957 12293 5129958 12039 No Security Update 15.01.2507.075 https://support.microsoft.com/help/5129958 12039 5129958 5129958 https://support.microsoft.com/help/5129958 12039 5129955 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5129955 16792 No Security Update 15.02.2562.053 https://support.microsoft.com/help/5129955 16792 5129955 5129955 https://support.microsoft.com/help/5129955 16792 5129956 12502 No Security Update 15.02.1748.053 https://support.microsoft.com/help/5129956 12502 5129956 5129956 https://support.microsoft.com/help/5129956 12502 Jan Mitchell from Microsoft 1.0 2026-10-02T07:00:00 <p>Information published.</p> Windows Raw Image Extension Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by convincing a user to navigate to a folder containing a specially crafted RAW image file. The vulnerability can be triggered when Windows generates a thumbnail or preview; the user does not need to open the file. Successful exploitation could allow remote code execution.</p> Windows Raw Image Extension Microsoft Yes CVE-2026-96943 Integer Overflow or Wraparound Heap-based Buffer Overflow 11804-10853 11804-10852 11804-21994 11804-21995 11804-11931 11804-11930 11804-11929 11804-21996 11804-21997 11804-21998 11804-21999 11804-22000 11804-22001 11804-22002 11804-22003 11804-22004 11804-22005 11804-11673 11804-11570 11804-11569 11804-11568 11804-21989 11804-21945 11804-21946 Remote Code Execution 11804-10853 Remote Code Execution 11804-10852 Remote Code Execution 11804-21994 Remote Code Execution 11804-21995 Remote Code Execution 11804-11931 Remote Code Execution 11804-11930 Remote Code Execution 11804-11929 Remote Code Execution 11804-21996 Remote Code Execution 11804-21997 Remote Code Execution 11804-21998 Remote Code Execution 11804-21999 Remote Code Execution 11804-22000 Remote Code Execution 11804-22001 Remote Code Execution 11804-22002 Remote Code Execution 11804-22003 Remote Code Execution 11804-22004 Remote Code Execution 11804-22005 Remote Code Execution 11804-11673 Remote Code Execution 11804-11570 Remote Code Execution 11804-11569 Remote Code Execution 11804-11568 Remote Code Execution 11804-21989 Remote Code Execution 11804-21945 Remote Code Execution 11804-21946 Critical 11804-10853 Critical 11804-10852 Critical 11804-21994 Critical 11804-21995 Critical 11804-11931 Critical 11804-11930 Critical 11804-11929 Critical 11804-21996 Critical 11804-21997 Critical 11804-21998 Critical 11804-21999 Critical 11804-22000 Critical 11804-22001 Critical 11804-22002 Critical 11804-22003 Critical 11804-22004 Critical 11804-22005 Critical 11804-11673 Critical 11804-11570 Critical 11804-11569 Critical 11804-11568 Critical 11804-21989 Critical 11804-21945 Critical 11804-21946 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21994 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21995 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21996 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21997 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21998 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21999 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22000 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22001 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22002 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22003 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22004 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-22005 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11673 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11570 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21989 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11804-21946 Release Notes 11804-10853 11804-10852 11804-21994 11804-21995 11804-11931 11804-11930 11804-11929 11804-21998 11804-21999 11804-22000 11804-22001 11804-22002 11804-22003 11804-22004 11804-22005 11804-11673 11804-11570 11804-11569 11804-11568 Maybe Security Update 2.4.36.0 https://support.microsoft.com/en-us/accounts-billing/get-updates-for-apps-and-games-in-microsoft-store 11804-10853 11804-10852 11804-21994 11804-21995 11804-11931 11804-11930 11804-11929 11804-21998 11804-21999 11804-22000 11804-22001 11804-22002 11804-22003 11804-22004 11804-22005 11804-11673 11804-11570 11804-11569 11804-11568 Release Notes Release Notes 11804-21996 11804-21997 11804-21989 11804-21945 11804-21946 Maybe Security Update 2.5.35.0 https://support.microsoft.com/en-us/accounts-billing/get-updates-for-apps-and-games-in-microsoft-store 11804-21996 11804-21997 11804-21989 11804-21945 11804-21946 Release Notes Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Storage Information Disclosure Vulnerability <p>Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized read-only access to the local file system.</p> Windows Storage Microsoft Yes CVE-2026-96944 Insertion of Sensitive Information into Externally-Accessible File or Directory 11923 11924 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 11923 Important 11924 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Failover Cluster Denial of Service Vulnerability <p>Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network.</p> Windows Failover Cluster Microsoft Yes CVE-2026-96945 Uncaught Exception 11571 11572 11923 11924 12436 12437 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12436 Denial of Service 12437 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-96946 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-96947 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw <a href="https://x.com/malware_owl">Tay Kiat Loong</a> and <a href="https://x.com/ultimat3hg">uhg</a> <a href="https://x.com/malware_owl">Tay Kiat Loong</a> <a href="https://x.com/ultimat3hg">uhg</a> <a href="https://www.linkedin.com/in/si-yeon-wi-b869533b4">wisi</a> <a href="https://x.com/m4x_1997">Aobo Wang</a> Tamim Abu Aiash (Spartacus, tmemabo1@gmail.com) https://www.linkedin.com/in/tamim-abu-aiash-81332b254/ https://x.com/SpartacusSec <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows Client Side Caching driver (csc.sys) Microsoft Yes CVE-2026-96948 Exposure of Sensitive System Information to an Unauthorized Control Sphere 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11569 11571 11572 11568 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11569 11571 11572 11568 5126651 5126651 https://support.microsoft.com/help/5126651 11569 11571 11572 11568 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; mpc0vo</a> with https://diffract-ai.com/ 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-96949 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC R4nger, mj with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability <p>Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-96950 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 R4nger, mj with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Shell Security Feature Bypass Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could evade Mark of the Web (MOTW) defenses.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In an email or instant message attack scenario, the attacker could send the targeted user a specially crafted file that is designed to exploit the vulnerability.</p> <p>In any case an attacker would have no way to force a user to view attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could entice a user to either click a link that directs the user to the attacker's site or send a malicious attachment.</p> Windows Shell Microsoft Yes CVE-2026-96951 Improper Neutralization of Special Elements used in a Command ('Command Injection') 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 11653 21933 Security Feature Bypass 10483 Security Feature Bypass 10543 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12099 Security Feature Bypass 12098 Security Feature Bypass 12097 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 21945 Security Feature Bypass 21946 Security Feature Bypass 12436 Security Feature Bypass 12437 Security Feature Bypass 20854 Security Feature Bypass 20853 Security Feature Bypass 11653 Security Feature Bypass 21933 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 11653 Important 21933 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10483 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10543 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10852 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10853 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10816 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10855 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11568 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11569 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11571 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11572 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11929 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11930 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11931 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12099 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12098 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12097 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11923 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11924 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12242 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12243 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12389 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12390 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 20437 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 20438 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 21945 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 21946 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12436 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12437 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 20854 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 20853 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11653 8.8 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 21933 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Release Notes 11653 Yes Security Update 20260925.100 11653 Release Notes Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21933 Security Update 154.0.4258.62 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21933 Release Notes yhw Benoit Sevens using Claude with Anthropic <a href="https://x.com/kai6u">Riku Bamba</a> with <a href="https://global.fujitsu/en-us">Fujitsu Limited</a> <a href="https://x.com/temp43487580">Yuya Chudo</a> with <a href="https://global.fujitsu/en-us">Fujitsu Limited</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> 2.0 2026-10-26T07:00:00 <p>Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could attempt to exploit this vulnerability by convincing a user to open a specially crafted media file. If the vulnerable component processes the file, memory corruption could occur, which may allow code to run on the affected system.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-96952 Heap-based Buffer Overflow 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13) and Ziling Chen</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability <p>Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-96953 NULL Pointer Dereference 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/tamim-abu-aiash-81332b254/">Tamim Abu Aiash (Spartacus, tmemabo1@gmail.com) </a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> SQL Server Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server using the applicable October 2026 security update listed below.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, locate the range containing your current version number in the following table. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note:</strong> If your version is not represented in the table, review the applicable update's prerequisites and the support status of your SQL Server release before choosing an update. Absence from this table alone does not establish that a version is unsupported.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5126967</strong></td> <td>SQL Server 2025 CU9+GDR (October GDR 2026)</td> <td>17.0.5015.4</td> <td>17.0.4006.2 - 17.0.5005.3</td> <td>KB5122048 - SQL2025 RTM CU9</td> </tr> <tr> <td><strong>5128492</strong></td> <td>SQL Server 2025 RTM+GDR (October GDR 2026)</td> <td>17.0.1145.4</td> <td>17.0.1000.7 - 17.0.1135.8</td> <td>KB5122770 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5126934</strong></td> <td>SQL Server 2022 CU27+GDR1 (October GDR 2026)</td> <td>16.0.4305.5</td> <td>16.0.4003.1 - 16.0.4295.3</td> <td>KB5104824 - SQL2022 RTM CU27</td> </tr> <tr> <td><strong>5128493</strong></td> <td>SQL Server 2022 RTM+GDR (October GDR 2026)</td> <td>16.0.1210.3</td> <td>16.0.1000.6 - 16.0.1200.5</td> <td>KB5122771 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5128494</strong></td> <td>SQL Server 2019 CU32+GDR (October GDR 2026)</td> <td>15.0.4500.2</td> <td>15.0.4003.23 - 15.0.4490.9</td> <td>KB5122772 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5128495</strong></td> <td>SQL Server 2019 RTM+GDR (October GDR 2026)</td> <td>15.0.2200.2</td> <td>15.0.2000.5 - 15.0.2190.7</td> <td>KB5122773 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5128496</strong></td> <td>SQL Server 2017 CU31+GDR (October GDR 2026)</td> <td>14.0.3560.2</td> <td>14.0.3006.16 - 14.0.3550.4</td> <td>KB5122774 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5128497</strong></td> <td>SQL Server 2017 RTM+GDR (October GDR 2026)</td> <td>14.0.2140.2</td> <td>14.0.1000.169 - 14.0.2130.4</td> <td>KB5122775 - Previous SQL2017 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>General Distribution Release (GDR) updates provide security and other broadly applicable critical fixes. Cumulative Updates (CUs) include accumulated fixes for the applicable SQL Server release. Use the version ranges above to select the security update for your installed servicing branch; CU+GDR updates apply to the listed CU branch, while RTM+GDR updates apply to the listed RTM/GDR branch.</p> SQL Server Microsoft Yes CVE-2026-96956 Stack-based Buffer Overflow 22007 11478 11821 22009 20748 22010 22008 12147 Elevation of Privilege 22007 Elevation of Privilege 11478 Elevation of Privilege 11821 Elevation of Privilege 22009 Elevation of Privilege 20748 Elevation of Privilege 22010 Elevation of Privilege 22008 Elevation of Privilege 12147 Important 22007 Important 11478 Important 11821 Important 22009 Important 20748 Important 22010 Important 22008 Important 12147 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 5128496 https://www.microsoft.com/download/details.aspx?familyid=b6413b5c-ab8e-4bd7-9793-72f5e805e83b 5122774 22007 Yes Security Update 14.0.3560.2 https://support.microsoft.com/help/5128496 22007 5128496 5128496 https://support.microsoft.com/help/5128496 22007 5128497 https://www.microsoft.com/download/details.aspx?familyid=25e555b8-beb6-43b5-ada2-1fa002e95f1b 5122775 11478 Yes Security Update 14.0.2140.2 https://support.microsoft.com/help/5128497 11478 5128497 5128497 https://support.microsoft.com/help/5128497 11478 5128495 https://www.microsoft.com/download/details.aspx?familyid=74110cdf-6dca-400d-a186-0047a061a1a1 5122773 11821 Yes Security Update 15.0.2200.2 https://support.microsoft.com/help/5128495 11821 5128495 5128495 https://support.microsoft.com/help/5128495 11821 5126934 https://www.microsoft.com/download/details.aspx?familyid=a96e87d9-4786-4b4e-9274-8619b01ef73a 5104824 22009 Yes Security Update 16.0.4305.5 https://support.microsoft.com/help/5126934 22009 5126934 5126934 https://support.microsoft.com/help/5126934 22009 5128492 https://www.microsoft.com/download/details.aspx?familyid=05d38ba3-f609-4011-b045-d56a9eb0bccb 5122770 20748 Yes Security Update 17.0.1145.4 https://support.microsoft.com/help/5128492 20748 5128492 5128492 https://support.microsoft.com/help/5128492 20748 5126967 https://www.microsoft.com/download/details.aspx?familyid=6d582614-a5b0-4cfa-b1f5-ef5c74f5d252 5122048 22010 Yes Security Update 17.0.5015.4 https://support.microsoft.com/help/5126967 22010 5126967 5126967 https://support.microsoft.com/help/5126967 22010 5128494 https://www.microsoft.com/download/details.aspx?familyid=b86faf06-5605-4095-bbc6-df92fe14509d 5122772 22008 Yes Security Update 15.0.4500.2 https://support.microsoft.com/help/5128494 22008 5128494 5128494 https://support.microsoft.com/help/5128494 22008 5128493 https://www.microsoft.com/download/details.aspx?familyid=82f92ae1-1cf3-4c27-9938-0b44f5a0a296 5122771 12147 Yes Security Update 16.0.1210.3 https://support.microsoft.com/help/5128493 12147 5128493 5128493 https://support.microsoft.com/help/5128493 12147 <a href="https://twitter.com/arudd1ck">Andrew Ruddick</a> with Microsoft Red Team 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Security Feature Bypass Vulnerability <p>Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could provide a specially crafted application that references an unsigned NuGet package. If a user restores or runs the application on an affected Linux system, signature verification might not be enforced, allowing untrusted package content to be installed or executed.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass required NuGet package signature verification on affected Linux systems. This could allow an unsigned package to be accepted when signature validation is required by policy.</p> .NET Microsoft Yes CVE-2026-96957 Improper Verification of Cryptographic Signature 20837 20838 21783 21785 21784 21956 16767 20839 Security Feature Bypass 20837 Security Feature Bypass 20838 Security Feature Bypass 21783 Security Feature Bypass 21785 Security Feature Bypass 21784 Security Feature Bypass 21956 Security Feature Bypass 16767 Security Feature Bypass 20839 Important 20837 Important 20838 Important 21783 Important 21785 Important 21784 Important 21956 Important 16767 Important 20839 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20838 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21783 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21785 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21784 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21956 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20839 5130036 https://dotnet.microsoft.com/download/dotnet/10.0 20837 20838 20839 Security Update 10.0.402 https://support.microsoft.com/help/5130036 20837 20838 20839 5130036 Release Notes https://dotnet.microsoft.com/download/dotnet/11.0 21783 21785 21784 Security Update 11.0.100-rc.2 https://github.com/dotnet/announcements/issues/487 21783 21785 21784 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-history 21956 Yes Security Update 18.10.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21956 Release Notes Release Notes https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-history 16767 Yes Security Update 17.14.42 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes <a href="https://www.linkedin.com/in/abdul-rehman---/">Muhammad Abdul Rehman</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0 and download and KB article links for Microsoft Visual Studio. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Denial of Service Vulnerability <p>Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.</p> .NET Microsoft Yes CVE-2026-96958 Inefficient Algorithmic Complexity 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 21957-20837 21957-20839 21957-20838 21957-21783 21957-21785 21957-21784 21957-12414 21957-12415 21957-12416 21957-12434 21957-12432 21957-12433 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 Denial of Service 12079-21983 Denial of Service 12079-21984 Denial of Service 12079-21985 Denial of Service 12079-21986 Denial of Service 12079-12436 Denial of Service 12078-21987 Denial of Service 12079-21988 Denial of Service 12079-11923 Denial of Service 12079-21989 Denial of Service 21957-20837 Denial of Service 21957-20839 Denial of Service 21957-20838 Denial of Service 21957-21783 Denial of Service 21957-21785 Denial of Service 21957-21784 Denial of Service 21957-12414 Denial of Service 21957-12415 Denial of Service 21957-12416 Denial of Service 21957-12434 Denial of Service 21957-12432 Denial of Service 21957-12433 Denial of Service 2472-21987 Denial of Service 2472-10378 Denial of Service 2472-10483 Denial of Service 11723-22028 Denial of Service 11723-10816 Denial of Service 11723-11571 Denial of Service 11677-22029 Denial of Service 11676-22029 Denial of Service 11676-21983 Denial of Service 11676-21984 Denial of Service 11676-11571 Denial of Service 11676-11923 Denial of Service 11863-10378 Denial of Service 11863-10483 Denial of Service 11650-22028 Denial of Service 11650-10378 Denial of Service 11650-10483 Denial of Service 11650-10816 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Important 21957-20837 Important 21957-20839 Important 21957-20838 Important 21957-21783 Important 21957-21785 Important 21957-21784 Important 21957-12414 Important 21957-12415 Important 21957-12416 Important 21957-12434 Important 21957-12432 Important 21957-12433 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21985 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21986 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21988 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21989 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-20837 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-21783 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-21785 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-21784 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-20837 21957-20839 21957-20838 Security Update 10.0.13 https://github.com/dotnet/announcements/issues/488 21957-20837 21957-20839 21957-20838 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-21783 21957-21785 21957-21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/488 21957-21783 21957-21785 21957-21784 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-12414 21957-12415 21957-12416 Security Update 8.0.5 https://github.com/dotnet/announcements/issues/488 21957-12414 21957-12415 21957-12416 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-12434 21957-12432 21957-12433 Security Update 9.0.21 https://github.com/dotnet/announcements/issues/488 21957-12434 21957-12432 21957-12433 Release Notes 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 <a href="https://x.com/soaj1664ashar">Dr.-Ing Ashar Javed</a> <a href="https://www.linkedin.com/in/kevin-sch/">Kevin Schmidt</a> <a href="https://www.linkedin.com/in/leandrosbatista21">Leandro Batista</a> <a href="https://www.linkedin.com/in/mateusz-mto-gierblinski/">Mateusz Gierblinski</a> with <a href="https://curios-it.eu/">Curios</a> 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.</p> .NET Microsoft Yes CVE-2026-96959 Allocation of Resources Without Limits or Throttling 21957-20837 21957-20839 21957-20838 21957-21783 21957-21785 21957-21784 21957-12414 21957-12415 21957-12416 21957-12434 21957-12432 21957-12433 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 Denial of Service 21957-20837 Denial of Service 21957-20839 Denial of Service 21957-20838 Denial of Service 21957-21783 Denial of Service 21957-21785 Denial of Service 21957-21784 Denial of Service 21957-12414 Denial of Service 21957-12415 Denial of Service 21957-12416 Denial of Service 21957-12434 Denial of Service 21957-12432 Denial of Service 21957-12433 Denial of Service 2472-21987 Denial of Service 2472-10378 Denial of Service 2472-10483 Denial of Service 11723-22028 Denial of Service 11723-10816 Denial of Service 11723-11571 Denial of Service 11677-22029 Denial of Service 11676-22029 Denial of Service 11676-21983 Denial of Service 11676-21984 Denial of Service 11676-11571 Denial of Service 11676-11923 Denial of Service 11863-10378 Denial of Service 11863-10483 Denial of Service 11650-22028 Denial of Service 11650-10378 Denial of Service 11650-10483 Denial of Service 11650-10816 Denial of Service 12079-21983 Denial of Service 12079-21984 Denial of Service 12079-21985 Denial of Service 12079-21986 Denial of Service 12079-12436 Denial of Service 12078-21987 Denial of Service 12079-21988 Denial of Service 12079-11923 Denial of Service 12079-21989 Important 21957-20837 Important 21957-20839 Important 21957-20838 Important 21957-21783 Important 21957-21785 Important 21957-21784 Important 21957-12414 Important 21957-12415 Important 21957-12416 Important 21957-12434 Important 21957-12432 Important 21957-12433 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-20837 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-21783 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-21785 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-21784 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21985 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21986 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21988 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21989 Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-20837 21957-20839 21957-20838 Security Update 10.0.13 https://github.com/dotnet/announcements/issues/489 21957-20837 21957-20839 21957-20838 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-21783 21957-21785 21957-21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/489 21957-21783 21957-21785 21957-21784 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-12414 21957-12415 21957-12416 Security Update 8.0.5 https://github.com/dotnet/announcements/issues/489 21957-12414 21957-12415 21957-12416 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-12434 21957-12432 21957-12433 Security Update 9.0.21 https://github.com/dotnet/announcements/issues/489 21957-12434 21957-12432 21957-12433 Release Notes 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 <a href="https://x.com/soaj1664ashar">Dr.-Ing Ashar Javed</a> <a href="https://x.com/ky0tofu">Ky0toFu</a> <a href="https://novice-22.com/">novice-22</a> Markus Magnuson 1.1 2026-10-15T07:00:00 <p>Updated the Security Updates table to add KB article links for .NET 11.0. This is an informational change only; the fixed builds are unchanged.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Denial of Service Vulnerability <p>Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network.</p> .NET Microsoft Yes CVE-2026-96960 Asymmetric Resource Consumption (Amplification) 21957-20837 21957-20839 21957-20838 21957-21783 21957-21785 21957-21784 21957-12414 21957-12415 21957-12416 21957-12434 21957-12432 21957-12433 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 Denial of Service 21957-20837 Denial of Service 21957-20839 Denial of Service 21957-20838 Denial of Service 21957-21783 Denial of Service 21957-21785 Denial of Service 21957-21784 Denial of Service 21957-12414 Denial of Service 21957-12415 Denial of Service 21957-12416 Denial of Service 21957-12434 Denial of Service 21957-12432 Denial of Service 21957-12433 Denial of Service 2472-21987 Denial of Service 2472-10378 Denial of Service 2472-10483 Denial of Service 11723-22028 Denial of Service 11723-10816 Denial of Service 11723-11571 Denial of Service 11677-22029 Denial of Service 11676-22029 Denial of Service 11676-21983 Denial of Service 11676-21984 Denial of Service 11676-11571 Denial of Service 11676-11923 Denial of Service 11863-10378 Denial of Service 11863-10483 Denial of Service 11650-22028 Denial of Service 11650-10378 Denial of Service 11650-10483 Denial of Service 11650-10816 Denial of Service 12079-21983 Denial of Service 12079-21984 Denial of Service 12079-21985 Denial of Service 12079-21986 Denial of Service 12079-12436 Denial of Service 12078-21987 Denial of Service 12079-21988 Denial of Service 12079-11923 Denial of Service 12079-21989 Important 21957-20837 Important 21957-20839 Important 21957-20838 Important 21957-21783 Important 21957-21785 Important 21957-21784 Important 21957-12414 Important 21957-12415 Important 21957-12416 Important 21957-12434 Important 21957-12432 Important 21957-12433 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-20837 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-21783 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-21785 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-21784 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21957-12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11723-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21985 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21986 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21988 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-21989 Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-20837 21957-20839 21957-20838 Security Update 10.0.13 https://github.com/dotnet/announcements/issues/490 21957-20837 21957-20839 21957-20838 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-21783 21957-21785 21957-21784 Security Update 11.0.0-rc.2 https://github.com/dotnet/announcements/issues/490 21957-21783 21957-21785 21957-21784 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-12414 21957-12415 21957-12416 Security Update 8.0.5 https://github.com/dotnet/announcements/issues/490 21957-12414 21957-12415 21957-12416 Release Notes Release Notes https://www.nuget.org/packages/System.Security.Cryptography.Xml 21957-12434 21957-12432 21957-12433 Security Update 9.0.21 https://github.com/dotnet/announcements/issues/490 21957-12434 21957-12432 21957-12433 Release Notes 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 <a href="https://x.com/soaj1664ashar">Dr.-Ing Ashar Javed</a> Coşkun Bağrıa&#231;ık 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Office Word Microsoft Yes CVE-2026-96995 Stack-based Buffer Overflow Numeric Truncation Error 11952 11953 12421 12420 11763 11762 11951 12440 21368 Elevation of Privilege 11952 Elevation of Privilege 11953 Elevation of Privilege 12421 Elevation of Privilege 12420 Elevation of Privilege 11763 Elevation of Privilege 11762 Elevation of Privilege 11951 Elevation of Privilege 12440 Elevation of Privilege 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Word Microsoft Yes CVE-2026-96996 Heap-based Buffer Overflow 11762 11763 11952 11953 12420 12421 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office OneNote Elevation of Privilege Vulnerability <p>Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Office OneNote Microsoft Yes CVE-2026-96997 Use After Free 11952 11953 12421 12420 11763 11762 11951 12440 21368 Elevation of Privilege 11952 Elevation of Privilege 11953 Elevation of Privilege 12421 Elevation of Privilege 12420 Elevation of Privilege 11763 Elevation of Privilege 11762 Elevation of Privilege 11951 Elevation of Privilege 12440 Elevation of Privilege 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Word Microsoft Yes CVE-2026-97001 Heap-based Buffer Overflow 21368 11762 11763 11951 11952 11953 12420 12421 12440 Remote Code Execution 21368 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Important 21368 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> <a href="https://www.linkedin.com/in/nam-phung-270108305/">zyx87</a> <a href="https://www.linkedin.com/in/phong-hai-382188280/">Phong Hai</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97003 Heap-based Buffer Overflow 10836 11952 11953 12421 12420 11763 11762 21368 11951 12440 Remote Code Execution 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Important 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97004 Heap-based Buffer Overflow Integer Underflow (Wrap or Wraparound) 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office PowerPoint Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-97005 Out-of-bounds Read 11951 12440 21368 11952 11953 12421 12420 11763 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97007 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Anonymous 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97008 Buffer Underwrite ('Buffer Underflow') 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Anonymous 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97009 Heap-based Buffer Overflow 11762 11763 11952 11953 12420 12421 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> minhthutb111 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97010 Use After Free 10836 21368 11951 12440 11952 11953 12421 12420 11763 11762 Remote Code Execution 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97011 Use of Uninitialized Resource Release of Invalid Pointer or Reference 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11951 Important 12440 Important 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Outlook Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-97012 Stack-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97014 Out-of-bounds Read 11762 11763 11952 11953 12420 12421 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12420 12421 Release Notes <a href="https://www.facebook.com/minhthu1112k">minhthutb111</a> <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Outlook Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could send a specially crafted email message to a target user. Simply viewing the message in the Outlook Reading Pane could trigger the vulnerability, without the recipient opening the message or clicking anything in it. Successful exploitation could allow the attacker to execute code on the recipient's system. Network access is required; authentication and user interaction are not required.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-97016 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97017 Use After Free 10836 21368 11951 12440 11952 11953 12421 12420 11763 11762 Remote Code Execution 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97738 Use After Free 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97739 Integer Underflow (Wrap or Wraparound) Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 21368 Critical 11951 Critical 12440 Critical 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97740 Exposure of Sensitive System Information to an Unauthorized Control Sphere 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Information Disclosure 21368 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97741 Heap-based Buffer Overflow Off-by-one Error 11763 11762 11951 12440 21368 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Critical 11763 Critical 11762 Critical 11951 Critical 12440 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97742 Stack-based Buffer Overflow 10836 21368 11951 12440 11952 11953 12421 12420 11763 11762 Remote Code Execution 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Critical 10836 Critical 21368 Critical 11951 Critical 12440 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97743 Use After Free 11763 11762 11951 12440 21368 Information Disclosure 11763 Information Disclosure 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> 0ccbbf129444eb66344ccafb92b00df4 <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office PowerPoint Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-97744 Out-of-bounds Read 11952 11953 12421 12420 11763 11762 11951 12440 21368 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">jmini</a> <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">boolgombear</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97745 Use After Free 11951 12440 21368 11952 11953 12421 12420 11763 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Critical 11951 Critical 12440 Critical 21368 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97746 Integer Underflow (Wrap or Wraparound) 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97747 Use After Free 10836 21368 11951 12440 11952 11953 12421 12420 11763 11762 Remote Code Execution 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97748 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Outlook Remote Code Execution Vulnerability <p>Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could send a specially crafted email message to a target user. Simply viewing the message in the Outlook Reading Pane could trigger the vulnerability, without the recipient opening the message or clicking anything in it. Successful exploitation could allow the attacker to execute code on the recipient's system. Network access is required; authentication and user interaction are not required.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-97749 Double Free 11952 11953 12421 12420 11763 11762 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97750 Stack-based Buffer Overflow 10836 11952 11953 12421 12420 11763 11762 21368 11951 12440 Remote Code Execution 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Important 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97751 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97752 Use After Free 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97753 Heap-based Buffer Overflow Integer Overflow or Wraparound 10836 11952 11953 12421 12420 11763 11762 21368 11951 12440 Remote Code Execution 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Critical 10836 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 21368 Critical 11951 Critical 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97754 Heap-based Buffer Overflow 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97755 Out-of-bounds Read 11961 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 11961 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Critical 11961 Critical 21368 Critical 11951 Critical 12440 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 5002927 5002908 11961 Maybe Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97756 Heap-based Buffer Overflow 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Critical 21368 Critical 11951 Critical 12440 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97757 Heap-based Buffer Overflow 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97758 Heap-based Buffer Overflow 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Critical 21368 Critical 11951 Critical 12440 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97759 Use After Free 12421 12420 11763 11762 11951 12440 21368 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 11951 Critical 12440 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97760 Out-of-bounds Read 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Information Disclosure 21368 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Information Disclosure 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97761 Stack-based Buffer Overflow 12421 12420 11763 11762 11951 12440 21368 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 11951 Critical 12440 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 yhw 0ccbbf129444eb66344ccafb92b00df4 <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97762 Out-of-bounds Write 10836 21368 11951 12440 11952 11953 12421 12420 11763 11762 Remote Code Execution 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Important 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97763 Heap-based Buffer Overflow 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97765 Heap-based Buffer Overflow 10836 11952 11953 12421 12420 11763 11762 21368 11951 12440 Remote Code Execution 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Critical 10836 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 21368 Critical 11951 Critical 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 0ccbbf129444eb66344ccafb92b00df4 <a href="https://x.com/lmksecurity">Jeongmin Choi with S2W</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97766 Heap-based Buffer Overflow 10836 11952 11953 12421 12420 11763 11762 21368 11951 12440 Remote Code Execution 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Important 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97767 Double Free NULL Pointer Dereference 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 21368 Critical 11951 Critical 12440 Critical 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97768 Heap-based Buffer Overflow 10836 11952 11953 12421 12420 11763 11762 21368 11951 12440 Remote Code Execution 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Important 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> namnp with <a href="https://x.com/vcslab">Viettel Cyber Security</a> and vietnq 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97769 Heap-based Buffer Overflow Improper Input Validation 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97770 Stack-based Buffer Overflow 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97771 Use After Free 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97772 Double Free 10836 21368 11951 12440 11952 11953 12421 11763 11762 12420 Remote Code Execution 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 12420 Important 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 11763 Important 11762 Important 12420 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97773 Heap-based Buffer Overflow 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 haowei yan 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Click-To-Run Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). How could an attacker exploit this elevation of privilege vulnerability?</strong></p> <p>An attacker could exploit this elevation of privilege vulnerability by first establishing a foothold on the local system such as opening a malicious document or gaining access through another local vector and then leveraging the flaw to break out of the Protected View sandbox. Protected View is intended to isolate untrusted content in a restricted environment; however, successful exploitation would allow the attacker to escape these restrictions and execute code with elevated privileges on the host system.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Office Click-To-Run Microsoft Yes CVE-2026-97774 Time-of-check Time-of-use (TOCTOU) Race Condition 11763 11762 Elevation of Privilege 11763 Elevation of Privilege 11762 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 Click to Run 11763 11762 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates 11763 11762 Click to Run Ben Lichtman with Microsoft 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97775 Use After Free Uncontrolled Resource Consumption 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97776 Heap-based Buffer Overflow 11952 11953 12421 12420 11763 11762 21368 11951 12440 10836 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 10836 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 21368 Critical 11951 Critical 12440 Critical 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 0ccbbf129444eb66344ccafb92b00df4 <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.2 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97777 Heap-based Buffer Overflow 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Important 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 yhw Anonymous <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.2 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97778 Integer Overflow or Wraparound 10836 21368 11951 12440 11952 11953 12421 12420 11763 11762 Remote Code Execution 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Critical 10836 Critical 21368 Critical 11951 Critical 12440 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97779 Out-of-bounds Read 10836 21368 11951 12440 11952 11953 12421 12420 11763 11762 Information Disclosure 10836 Information Disclosure 21368 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 11762 Important 10836 Important 21368 Important 11951 Important 12440 Important 11952 Important 11953 Important 12421 Important 12420 Important 11763 Important 11762 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>Are the updates for Microsoft Office LTSC for Mac 2021 and 2024 currently available?</strong></p> <p>Yes. As of October 15, 2025, the security update for Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac are available. Customers running Microsoft Office LTSC for Mac 2021, 2024 and Microsoft Office 365 for Mac should ensure the update is installed to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-97780 Heap-based Buffer Overflow 21368 11951 12440 11952 11953 12421 12420 11763 11762 10836 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 12420 Remote Code Execution 11763 Remote Code Execution 11762 Remote Code Execution 10836 Critical 21368 Critical 11951 Critical 12440 Critical 11952 Critical 11953 Critical 12421 Critical 12420 Critical 11763 Critical 11762 Critical 10836 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Security Update 16.114.26101123 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 21368 11951 12440 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Security Update 16.0.14334.20974 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11952 11953 Release Notes Release Notes https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Security Update 16.0.17932.21056 https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 12421 12420 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11763 11762 Release Notes 5002928 https://www.microsoft.com/en-us/download/details.aspx?id=108860 5002910 10836 Security Update 16.0.10417.20228 https://support.microsoft.com/help/5002928 10836 5002928 <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.1 2026-10-15T07:00:00 <p>Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the <a href="https://go.microsoft.com/fwlink/p/?linkid=831049">Release Notes</a> for more information and download links.</p> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office OneNote Remote Code Execution Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could send a specially crafted OneNote link and convince a user to open it. The link could cause OneNote to launch an attacker-controlled external target, which could lead to remote code execution; user interaction is required.</p> Microsoft Office OneNote Microsoft Yes CVE-2026-97781 Improper Neutralization of Special Elements used in a Command ('Command Injection') 11762 11763 Remote Code Execution 11762 Remote Code Execution 11763 Important 11762 Important 11763 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 Release Notes https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Security Update https://aka.ms/OfficeSecurityReleases https://learn.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11762 11763 Release Notes Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Tampering Vulnerability <p>Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with access to an affected SharePoint form could submit specially crafted session data to the server. Successful exploitation could allow the attacker to alter trusted application state and cause unauthorized backend actions; user interaction is not required.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-97782 Observable Discrepancy 11961 Tampering 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11961 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 Ivan Vagunin 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-29T07:00:00 <p>Changes made to the security updates links and information. This is an informational change only.</p> Microsoft Office SharePoint Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability might be able to run their scripts in the security context of the current user by enticing the user to click on a link resulting in a cross-site scripting attack on the SharePoint Server.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-97783 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11585 10950 11961 Spoofing 11585 Spoofing 10950 Spoofing 11961 Important 11585 Important 10950 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11585 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10950 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11961 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 Bui Xuan Quang (buxu) with Ncsgroup.vn 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-21T07:00:00 <p>The vulnerability associated with this CVE was fixed in July, however was inadvertently not included with that release. Microsoft recommends updating to the most current release of the SharePoint server.</p> AAD App Proxy Elevation of Privilege Vulnerability <p>Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> AAD App Proxy Microsoft No CVE-2026-97785 Improper Authentication 21977 Elevation of Privilege 21977 Critical 21977 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 10.0 8.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 21977 Brian Ombongi 1.0 2026-10-22T07:00:00 <p>Information published.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Microsoft Yes CVE-2026-97787 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11923 11924 20854 20853 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Important 11923 Important 11924 Important 20854 Important 20853 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-10-13T07:00:00 <p>Information published.</p> Active Directory Federation Services (AD FS) Information Disclosure Vulnerability <p>Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The vulnerable component uses a weak encryption algorithm or cipher. Traffic sent over a network by the vulnerable component could be decrypted and expose information related to a user or service's active session.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-97788 Observable Discrepancy 10852 10378 10379 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 10483 10543 10853 10816 10855 11568 11569 11571 11572 11923 11924 12436 12437 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 Information Disclosure 10852 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 12079-21983 Information Disclosure 12079-21984 Information Disclosure 12079-21985 Information Disclosure 12079-21986 Information Disclosure 12079-12436 Information Disclosure 12078-21987 Information Disclosure 12079-21988 Information Disclosure 12079-11923 Information Disclosure 12079-21989 Information Disclosure 2472-21987 Information Disclosure 2472-10378 Information Disclosure 2472-10483 Information Disclosure 11723-22028 Information Disclosure 11723-10816 Information Disclosure 11723-11571 Information Disclosure 11677-22029 Information Disclosure 11676-22029 Information Disclosure 11676-21983 Information Disclosure 11676-21984 Information Disclosure 11676-11571 Information Disclosure 11676-11923 Information Disclosure 11863-10378 Information Disclosure 11863-10483 Information Disclosure 11650-22028 Information Disclosure 11650-10378 Information Disclosure 11650-10483 Information Disclosure 11650-10816 Important 10852 Important 10378 Important 10379 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Important 10483 Important 10543 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12436 Important 12437 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12079-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12079-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12079-21985 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12079-21986 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12079-12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12078-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12079-21988 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12079-21989 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 2472-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11723-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11723-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11723-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11677-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11676-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11676-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11676-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11650-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11650-10816 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 11723-22028 11723-10816 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 Anonymous Anonymous Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires multiple conditions to be met. The attacker must have access to a user's machine and the user must have initiated an RDP session. The attack must also be carried out within a certain amount of time from the initiation of the RDP session.</p> Remote Desktop Client Microsoft Yes CVE-2026-97789 Use After Free 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 haowei yan &amp; xiaozun tang 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability <p>Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Microsoft Yes CVE-2026-97790 Improper Link Resolution Before File Access ('Link Following') 11923 11924 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Tampering 11923 Tampering 11924 Tampering 12389 Tampering 12390 Tampering 20437 Tampering 20438 Tampering 21945 Tampering 21946 Tampering 12436 Tampering 12437 Tampering 20854 Tampering 20853 Important 11923 Important 11924 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21945 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21946 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability <p>Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Microsoft Yes CVE-2026-97792 Incorrect Permission Assignment for Critical Resource 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 b5b7f9fc53ad629cf59ac8d09f1da10c 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Setup and Deployment Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> Windows Setup and Deployment Microsoft Yes CVE-2026-97793 Missing Authentication for Critical Function 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://x.com/yo_yo_yo_jbo">Jonathan Bar Or</a> with CrowdStrike 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Microsoft Yes CVE-2026-97794 Heap-based Buffer Overflow 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Service Elevation of Privilege Vulnerability <p>Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Error Reporting Microsoft Yes CVE-2026-97798 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.linkedin.com/in/nick-v-417a592b0/">Nick Vidovic</a> <a href="https://www.linkedin.com/in/nick-v-417a592b0/">Nick Vidovic</a> <a href="https://www.twitter.com/crowdstrike">CrowdStrike</a> with <a href="https://www.crowdstrike.com/">CrowdStrike</a> ThanatosTian & npc0vo & wgg & 2st with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> 1.1 2026-10-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Audio Service Elevation of Privilege Vulnerability <p>Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Audio Service Microsoft Yes CVE-2026-97799 Improper Verification of Cryptographic Signature 12389 12390 20437 20438 21945 21946 20854 20853 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://www.twitter.com/crowdstrike">CrowdStrike</a> with <a href="https://www.crowdstrike.com/">CrowdStrike</a> <a href="https://www.linkedin.com/in/loi-nguyen-894685254/">LoiNguyen (VinSOC) </a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Mobile Broadband Elevation of Privilege Vulnerability <p>Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Mobile Broadband Microsoft Yes CVE-2026-97800 Incorrect Permission Assignment for Critical Resource 12389 12390 20437 20438 21945 21946 20854 20853 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> .NET Framework Tampering Vulnerability <p>Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network.</p> .NET Framework Microsoft Yes CVE-2026-97801 Improper Validation of Specified Type of Input 12079-21983 12079-21984 12079-21985 12079-21986 12079-12436 12078-21987 12079-21988 12079-11923 12079-21989 2472-21987 2472-10378 2472-10483 11723-22028 11723-10816 11723-11571 11677-22029 11676-22029 11676-21983 11676-21984 11676-11571 11676-11923 11863-10378 11863-10483 11650-22028 11650-10378 11650-10483 11650-10816 Tampering 12079-21983 Tampering 12079-21984 Tampering 12079-21985 Tampering 12079-21986 Tampering 12079-12436 Tampering 12078-21987 Tampering 12079-21988 Tampering 12079-11923 Tampering 12079-21989 Tampering 2472-21987 Tampering 2472-10378 Tampering 2472-10483 Tampering 11723-22028 Tampering 11723-10816 Tampering 11723-11571 Tampering 11677-22029 Tampering 11676-22029 Tampering 11676-21983 Tampering 11676-21984 Tampering 11676-11571 Tampering 11676-11923 Tampering 11863-10378 Tampering 11863-10483 Tampering 11650-22028 Tampering 11650-10378 Tampering 11650-10483 Tampering 11650-10816 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-12436 Important 12078-21987 Important 12079-21988 Important 12079-11923 Important 12079-21989 Important 2472-21987 Important 2472-10378 Important 2472-10483 Important 11723-22028 Important 11723-10816 Important 11723-11571 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 11676-11571 Important 11676-11923 Important 11863-10378 Important 11863-10483 Important 11650-22028 Important 11650-10378 Important 11650-10483 Important 11650-10816 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-21985 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-21986 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12078-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-21988 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-21989 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 2472-21987 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11723-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11723-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11723-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11677-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-22029 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-21983 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-21984 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11650-22028 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11650-10816 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-21985 12079-21986 12079-12436 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-21985 12079-21986 12079-12436 5127690 5127691 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127691 12078-21987 Maybe Security Update 4.8.9363.0 https://support.microsoft.com/help/5127691 12078-21987 5127691 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-22028 11723-10816 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5126868 5126868 https://support.microsoft.com/help/5126868 11723-22028 11723-10816 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-22029 11676-11571 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-22029 11676-11571 5127685 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127667 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127667 11863-10378 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127667 11863-10378 5127667 5127668 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127668 11863-10483 Maybe Security Update 4.7.4150.0 https://support.microsoft.com/help/5127668 11863-10483 5127668 5127684 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127684 11650-22028 11650-10816 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127684 11650-22028 11650-10816 5127684 5127686 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127686 11650-10378 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127686 11650-10378 5127686 5127688 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127688 11650-10483 Maybe Security Update 4.8.4811.0 https://support.microsoft.com/help/5127688 11650-10483 5127688 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-97803 Heap-based Buffer Overflow 20854 20853 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-10-13T07:00:00 <p>Information published.</p> HID Class Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could create or delete files in the security context of the “NT AUTHORITY\ LOCAL SERVICE” account.</p> HID class driver Microsoft Yes CVE-2026-97804 Heap-based Buffer Overflow 21945 21946 10852 10853 10816 11568 11569 11572 11930 12098 12097 12242 12243 20437 20438 20854 20853 10855 11571 11929 11931 12099 11923 11924 12389 12390 12436 12437 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11572 Elevation of Privilege 11930 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 10855 Elevation of Privilege 11571 Elevation of Privilege 11929 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 12437 Important 21945 Important 21946 Important 10852 Important 10853 Important 10816 Important 11568 Important 11569 Important 11572 Important 11930 Important 12098 Important 12097 Important 12242 Important 12243 Important 20437 Important 20438 Important 20854 Important 20853 Important 10855 Important 11571 Important 11929 Important 11931 Important 12099 Important 11923 Important 11924 Important 12389 Important 12390 Important 12436 Important 12437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11572 11571 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11572 11571 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11572 11571 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11930 11929 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11930 11929 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11930 12098 12097 11929 11931 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12098 12097 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12098 12097 12099 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 pwn2addr 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Partition Management Driver Remote Code Execution Vulnerability <p>Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Partition Management Driver Microsoft Yes CVE-2026-97805 Out-of-bounds Read Improper Input Validation 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 yhw 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-97806 Use After Free 11568 11569 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 11571 11572 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 11571 Elevation of Privilege 11572 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Important 11571 Important 11572 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-97807 Use After Free 11568 11569 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 20854 20853 11571 11572 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 11571 Elevation of Privilege 11572 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 20854 Important 20853 Important 11571 Important 11572 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-97808 Use After Free 12098 12097 12242 12243 12389 12390 20437 20438 11568 11569 11929 11930 11931 12099 21945 21946 20854 20853 11571 11572 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 11571 Elevation of Privilege 11572 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12099 Important 21945 Important 21946 Important 20854 Important 20853 Important 11571 Important 11572 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12098 12097 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12098 12097 12099 5126657 5126657 https://support.microsoft.com/help/5126657 12098 12097 11929 11930 11931 12099 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Broadcast DVR User Service Elevation of Privilege Vulnerability <p>Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Broadcast DVR User Service Microsoft Yes CVE-2026-97809 Use After Free 12243 12389 12390 20437 20438 11568 11569 11929 11930 11931 12099 12098 12097 12242 21945 21946 20854 20853 11571 11572 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 20854 Elevation of Privilege 20853 Elevation of Privilege 11571 Elevation of Privilege 11572 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 11568 Important 11569 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 21945 Important 21946 Important 20854 Important 20853 Important 11571 Important 11572 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Microsoft Yes CVE-2026-97810 Heap-based Buffer Overflow 12389 12390 20437 20438 21945 21946 12436 12437 11923 11924 20854 20853 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 11923 Important 11924 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Wa1nut4 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability <p>Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> OpenSSH for Windows Microsoft Yes CVE-2026-97811 Double Free Uncontrolled Resource Consumption 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 YeonBa AIフィジカルインターフェイス二号機 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Update Orchestrator Service Elevation of Privilege Vulnerability <p>Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Update Orchestrator Service Microsoft Yes CVE-2026-97812 Double Free 11929 11930 11931 12099 12098 12097 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12099 Elevation of Privilege 12098 Elevation of Privilege 12097 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 21945 Elevation of Privilege 21946 Elevation of Privilege 12436 Elevation of Privilege 12437 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 mj with Kunlun Lab &amp; Zhiniang Peng with HUST AIフィジカルインターフェイス二号機 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Hyper-V Information Disclosure Vulnerability <p>Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Hyper-V Microsoft Yes CVE-2026-97813 Heap-based Buffer Overflow 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Text Shaping Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Text Shaping Microsoft Yes CVE-2026-97814 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 11568 Critical 11569 Critical 12243 Critical 12389 Critical 12390 Critical 20437 Critical 20438 Critical 21945 Critical 21946 Critical 12436 Critical 12437 Critical 20854 Critical 20853 Critical 11571 Critical 11572 Critical 11929 Critical 11930 Critical 11931 Critical 12099 Critical 12098 Critical 12097 Critical 11923 Critical 11924 Critical 12242 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Error Reporting Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Error Reporting Microsoft Yes CVE-2026-97815 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Pwnforr777 1.0 2026-10-13T07:00:00 <p>Information published.</p> Microsoft OpenSSH for Windows Remote Code Execution Vulnerability <p>Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> OpenSSH for Windows Microsoft Yes CVE-2026-97816 Use After Free 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12099 Remote Code Execution 12098 Remote Code Execution 12097 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 21945 Remote Code Execution 21946 Remote Code Execution 12436 Remote Code Execution 12437 Remote Code Execution 20854 Remote Code Execution 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21945 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21946 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 AIフィジカルインターフェイス二号機 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97817 Heap-based Buffer Overflow 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97819 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97820 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97821 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 21945 21946 12436 12437 20854 20853 20438 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 20438 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 20438 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 21945 21946 20438 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97822 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97823 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97824 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97825 Out-of-bounds Read 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97826 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97827 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97828 Buffer Over-read 21945 21946 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 21945 Important 21946 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5127648 https://support.microsoft.com/help/5127648 21945 21946 20437 20438 12389 12390 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12097 12098 12099 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12097 12098 12099 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12097 12098 12099 5126657 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12437 12436 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12437 12436 5126646 5126646 https://support.microsoft.com/help/5126646 12437 12436 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20853 20854 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20853 20854 5127646 5127646 https://support.microsoft.com/help/5127646 20853 20854 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97829 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Monthly Rollup 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Windows Internet Information Services Denial of Service Vulnerability <p>Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.</p> Windows Internet Information Services Microsoft Yes CVE-2026-97830 Double Free 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Denial of Service 11923 Denial of Service 11924 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 20437 Denial of Service 20438 Denial of Service 21945 Denial of Service 21946 Denial of Service 12436 Denial of Service 12437 Denial of Service 20854 Denial of Service 20853 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21945 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21946 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Anonymous 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97831 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97832 Out-of-bounds Read 10378 10379 10483 10543 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Important 10378 Important 10379 Important 10483 Important 10543 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12243 12242 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12243 12242 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97833 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97834 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97835 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97836 Out-of-bounds Read 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11572 11568 11569 11571 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11572 11568 11569 11571 5126651 5126651 https://support.microsoft.com/help/5126651 11572 11568 11569 11571 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97837 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97838 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97839 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97840 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97841 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97842 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97843 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> Role: DNS Server Information Disclosure Vulnerability <p>Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Role: DNS Server Microsoft Yes CVE-2026-97844 Out-of-bounds Read 10378 10379 10483 10543 10852 10853 10816 10855 11568 11569 11571 11572 11929 11930 11931 12099 12098 12097 11923 11924 12242 12243 12389 12390 20437 20438 21945 21946 12436 12437 20854 20853 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12099 Information Disclosure 12098 Information Disclosure 12097 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 21945 Information Disclosure 21946 Information Disclosure 12436 Information Disclosure 12437 Information Disclosure 20854 Information Disclosure 20853 Important 10378 Important 10379 Important 10483 Important 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12099 Important 12098 Important 12097 Important 11923 Important 11924 Important 12242 Important 12243 Important 12389 Important 12390 Important 20437 Important 20438 Important 21945 Important 21946 Important 12436 Important 12437 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21945 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21946 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5126835 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126835 5123065 10378 10379 Yes Security Update 6.2.9200.26434 https://support.microsoft.com/help/5126835 10378 10379 5126835 5126836 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126836 5123066 10483 10543 Yes Security Update 6.3.9600.23470 https://support.microsoft.com/help/5126836 10483 10543 5126836 5126868 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126868 5123099 10852 10853 10816 10855 Yes Security Update 10.0.14393.9612 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126868 5126868 https://support.microsoft.com/help/5126868 10852 10853 10816 10855 5126651 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126651 5122876 11568 11569 11571 11572 Yes Security Update 10.0.17763.9376 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126651 5126651 https://support.microsoft.com/help/5126651 11568 11569 11571 11572 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 11929 11930 11931 Yes Security Update 10.0.19044.7807 https://support.microsoft.com/help/5126657 11929 11930 11931 5126657 5126657 https://support.microsoft.com/help/5126657 11929 11930 11931 12099 12098 12097 5126657 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126657 5122878 12099 12098 12097 Yes Security Update 10.0.19045.7807 https://support.microsoft.com/help/5126657 12099 12098 12097 5126657 5126655 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126655 5122882 11923 11924 Yes Security Update 10.0.20348.5761 https://support.microsoft.com/help/5126655 11923 11924 5126655 5126655 https://support.microsoft.com/help/5126655 11923 11924 5126653 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126653 5122880 12242 12243 Yes Security Update 10.0.22631.7652 https://support.microsoft.com/help/5126653 12242 12243 5126653 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 12389 12390 Yes Security Update 10.0.26100.9711 https://support.microsoft.com/help/5127648 12389 12390 5127648 5127648 https://support.microsoft.com/help/5127648 12389 12390 20437 20438 21945 21946 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 5124008 20437 20438 Yes Security Update 10.0.26200.9711 https://support.microsoft.com/help/5127648 20437 20438 5127648 5127648 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127648 21945 21946 Yes Security Update 10.0.26300.9711 https://support.microsoft.com/help/5127648 21945 21946 5127648 5126646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5126646 5122871 12436 12437 Yes Security Update 10.0.26100.33650 https://support.microsoft.com/help/5126646 12436 12437 5126646 5126646 https://support.microsoft.com/help/5126646 12436 12437 5127646 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5127646 5124012 20854 20853 Yes Security Update 10.0.28000.3231 https://support.microsoft.com/help/5127646 20854 20853 5127646 5127646 https://support.microsoft.com/help/5127646 20854 20853 Rajesh Kumar 1.0 2026-10-13T07:00:00 <p>Information published.</p> NGINX ngx_http_js_module vulnerability Mariner f5 Yes CVE-2026-101025 Missing Release of Memory after Effective Lifetime 22054-17084 22054-17084 Moderate 22054-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 22054-17084 Release Notes 22054-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22054-17084 Release Notes 1.0 2026-10-17T01:07:54 <p>Information published.</p> AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity Mariner GitHub_M Yes CVE-2026-104150 Uncontrolled Resource Consumption 21971-17084 21971-17084 Important 21971-17084 Release Notes 21971-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21971-17084 Release Notes 1.0 2026-10-17T01:01:52 <p>Information published.</p> info leak uploading over WebSockets with GnuTLS Mariner curl Yes CVE-2026-107928 21708-17084 21707-17084 21862-17084 21840-17084 21918-17084 21021-17084 21708-17084 21707-17084 21862-17084 21840-17084 21918-17084 21021-17084 Low 21708-17084 Low 21707-17084 Low 21862-17084 Low 21840-17084 Low 21918-17084 Low 21021-17084 3.7 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U 21708-17084 3.7 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U 21707-17084 3.7 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U 21862-17084 3.7 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U 21840-17084 3.7 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U 21918-17084 3.7 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U 21021-17084 Release Notes 21708-17084 21707-17084 21862-17084 21840-17084 21918-17084 21021-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21708-17084 21707-17084 21862-17084 21840-17084 21918-17084 21021-17084 Release Notes 1.0 2026-10-23T01:02:33 <p>Information published.</p> 2.0 2026-10-24T01:44:42 <p>Information published.</p> qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string Mariner harborist Yes CVE-2026-110816 Uncaught Exception 19693-17084 19693-17084 Moderate 19693-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 1.0 2026-10-17T01:08:21 <p>Information published.</p> Openssh: openssh: sftp can write outside the destination directory from a server-supplied path Mariner redhat Yes CVE-2026-110923 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21837-17084 21837-17084 Moderate 21837-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-17T01:07:25 <p>Information published.</p> Openssh: openssh: gssapi delegated credentials can be stored after a failed authentication Mariner redhat Yes CVE-2026-110924 Incomplete Cleanup 21837-17084 21837-17084 Moderate 21837-17084 4.8 4.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-21T01:11:59 <p>Information published.</p> Openssh: openssh: shared lz77 compression dictionary leaks plaintext across channels Mariner redhat Yes CVE-2026-110926 Observable Discrepancy 21837-17084 21837-17084 Moderate 21837-17084 5.3 4.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-21T01:11:46 <p>Information published.</p> Openssh: openssh: a compressed payload can expand past the maximum packet size Mariner redhat Yes CVE-2026-110927 Allocation of Resources Without Limits or Throttling 21837-17084 21837-17084 Moderate 21837-17084 4.3 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-21T01:11:53 <p>Information published.</p> body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body Mariner openjs Yes CVE-2026-111181 Uncaught Exception 19693-17084 19693-17084 Important 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 2.0 2026-10-26T01:45:50 <p>Information published.</p> 1.0 2026-10-25T01:02:08 <p>Information published.</p> Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal paths. These include opt-in parameterize=false queries and IN lists, and positions in developer-written where strings that the parser does not bind, such as BETWEEN bounds, function arguments and LIKE ESCAPE literals. Doubling single quotes without accounting for backslash escapes allows a value to alter the query. Bound paths are not affected; whereBetween() is bound from 4.1.2. This is fixed in 4.2.0. Mariner mitre Yes CVE-2026-111444 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 22074-17084 22074-17084 Critical 22074-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 22074-17084 Release Notes 22074-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22074-17084 Release Notes 1.0 2026-10-21T01:02:42 <p>Information published.</p> Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is configured, a mail server is configured, and the server accepts an attacker-chosen Host, an attacker whose request triggers a cold start can direct later error emails to an address under their control for that application's lifetime. Emails disclose error and request metadata; on engines/versions where scope dumps render, they may also disclose configuration secrets and other users' session/cookie data. On the Lucee 7 engine, scope dumps fail to render, limiting disclosure to header fields. This is fixed in 4.1.2. Mariner mitre Yes CVE-2026-111450 Use of Less Trusted Source 22074-17084 22074-17084 Moderate 22074-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 22074-17084 Release Notes 22074-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22074-17084 Release Notes 1.0 2026-10-21T01:02:36 <p>Information published.</p> webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades Mariner openjs Yes CVE-2026-112085 Origin Validation Error 19693-17084 19693-17084 Important 19693-17084 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 2.0 2026-10-26T01:46:01 <p>Information published.</p> 1.0 2026-10-25T01:02:13 <p>Information published.</p> HarfBuzz 8.0.0 through 14.6.0 Out-of-Bounds Write via WebAssembly font_glyph_to_string Mariner VulnCheck Yes CVE-2026-113679 Out-of-bounds Write 20833-17084 20833-17084 Moderate 20833-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 20833-17084 Release Notes 20833-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20833-17084 Release Notes 1.0 2026-10-22T01:01:24 <p>Information published.</p> HarfBuzz 8.0.0 through 14.6.0 WebAssembly Shaper NULL Pointer Dereference DoS Mariner VulnCheck Yes CVE-2026-113680 NULL Pointer Dereference 20833-17084 20833-17084 Moderate 20833-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 20833-17084 Release Notes 20833-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20833-17084 Release Notes 1.0 2026-10-22T01:01:29 <p>Information published.</p> Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow Mariner VulnCheck Yes CVE-2026-115384 Improper Input Validation 21767-17084 21789-17084 21840-17084 21918-17084 21767-17084 21789-17084 21840-17084 21918-17084 Critical 21767-17084 Critical 21789-17084 Critical 21840-17084 Critical 21918-17084 9.9 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 21767-17084 9.9 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 21789-17084 9.9 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 21840-17084 9.9 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 21918-17084 Release Notes 21767-17084 21789-17084 21840-17084 21918-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21767-17084 21789-17084 21840-17084 21918-17084 Release Notes 2.0 2026-10-26T14:49:44 <p>Information published.</p> 1.0 2026-10-25T01:05:45 <p>Information published.</p> Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes Mariner VulnCheck Yes CVE-2026-115392 UNIX Symbolic Link (Symlink) Following 21588-17084 21588-17084 Important 21588-17084 7.9 7.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L 21588-17084 Release Notes 21588-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21588-17084 Release Notes 2.0 2026-10-26T14:50:29 <p>Information published.</p> 1.0 2026-10-25T01:02:15 <p>Information published.</p> FTP connection reuse inherits client-certificate Mariner curl Yes CVE-2026-86411 21840-17084 22057-17084 21840-17084 22057-17084 Low 21840-17084 Low 22057-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U 21840-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U 22057-17084 Release Notes 21840-17084 22057-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21840-17084 22057-17084 Release Notes 1.0 2026-10-23T01:10:45 <p>Information published.</p> server-set cookie erases cookie jar Mariner curl Yes CVE-2026-86412 21840-17084 21918-17084 21840-17084 21918-17084 Low 21840-17084 Low 21918-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U 21840-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U 21918-17084 Release Notes 21840-17084 21918-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21840-17084 21918-17084 Release Notes 1.0 2026-10-23T01:10:54 <p>Information published.</p> Negotiate credentials sent to redirected origin Mariner curl Yes CVE-2026-86413 21840-17084 22057-17084 21840-17084 22057-17084 Moderate 21840-17084 Moderate 22057-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L 21840-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L 22057-17084 Release Notes 21840-17084 22057-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21840-17084 22057-17084 Release Notes 1.0 2026-10-23T01:11:39 <p>Information published.</p> auto client cert connection reuse mixup Mariner curl Yes CVE-2026-86415 21840-17084 22057-17084 21840-17084 22057-17084 Low 21840-17084 Low 22057-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U 21840-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U 22057-17084 Release Notes 21840-17084 22057-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21840-17084 22057-17084 Release Notes 1.0 2026-10-23T01:11:05 <p>Information published.</p> cross-origin reuse of a Negotiate connection Mariner curl Yes CVE-2026-87861 21840-17084 22057-17084 21840-17084 22057-17084 Low 21840-17084 Low 22057-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U 21840-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U 22057-17084 Release Notes 21840-17084 22057-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21840-17084 22057-17084 Release Notes 1.0 2026-10-23T01:11:15 <p>Information published.</p> wolfSSL public-key pinning bypass Mariner curl Yes CVE-2026-87866 21708-17084 21707-17084 21862-17084 21840-17084 21918-17084 21021-17084 21708-17084 21707-17084 21862-17084 21840-17084 21918-17084 21021-17084 Important 21708-17084 Important 21707-17084 Moderate 21862-17084 Moderate 21840-17084 Moderate 21918-17084 Moderate 21021-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21708-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21707-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U 21862-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U 21840-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U 21918-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U 21021-17084 Release Notes 21708-17084 21707-17084 21862-17084 21840-17084 21918-17084 21021-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21708-17084 21707-17084 21862-17084 21840-17084 21918-17084 21021-17084 Release Notes 1.0 2026-10-23T01:03:55 <p>Information published.</p> 2.0 2026-10-23T14:45:08 <p>Information published.</p> Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds Mariner redhat Yes CVE-2026-88834 Observable Discrepancy 21821-17084 21821-17084 Low 21821-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21821-17084 Release Notes 21821-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21821-17084 Release Notes 1.0 2026-10-17T01:02:54 <p>Information published.</p> 2.0 2026-10-19T14:42:34 <p>Information published.</p> Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and 21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in th Mariner oracle Yes CVE-2026-91403 Use of a Broken or Risky Cryptographic Algorithm 19693-17084 19693-17084 Critical 19693-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 19693-17084 Release Notes 19693-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19693-17084 Release Notes 2.0 2026-10-26T01:45:56 <p>Information published.</p> 1.0 2026-10-25T01:02:11 <p>Information published.</p> HTTP/2 upload Use-After-Free Mariner curl Yes CVE-2026-92392 Use After Free 21862-17084 21840-17084 21918-17084 21862-17084 21840-17084 21918-17084 Important 21862-17084 Important 21840-17084 Important 21918-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21862-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21840-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21918-17084 Release Notes 21862-17084 21840-17084 21918-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21862-17084 21840-17084 21918-17084 Release Notes 1.0 2026-10-17T01:07:14 <p>Information published.</p> Authorization: Negotiate sent to foreign origin Mariner curl Yes CVE-2026-94265 21840-17084 22057-17084 21840-17084 22057-17084 Moderate 21840-17084 Moderate 22057-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L 21840-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L 22057-17084 Release Notes 21840-17084 22057-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21840-17084 22057-17084 Release Notes 1.0 2026-10-23T01:11:27 <p>Information published.</p> Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation Mariner GitHub_M Yes CVE-2026-94603 Protection Mechanism Failure 17793-17084 17793-17084 Critical 17793-17084 10.0 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 17793-17084 Release Notes 17793-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17793-17084 Release Notes 1.0 2026-10-17T01:06:54 <p>Information published.</p> Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() components Mariner mitre Yes CVE-2026-95117 22053-17084 22053-17084 Moderate 22053-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 22053-17084 Release Notes 22053-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22053-17084 Release Notes 1.0 2026-10-17T01:07:20 <p>Information published.</p> MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges Mariner GitHub_M Yes CVE-2026-97380 Unverified Password Change 21953-17084 21953-17084 Important 21953-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21953-17084 Release Notes 21953-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21953-17084 Release Notes 2.0 2026-10-22T01:11:15 <p>Information published.</p> 1.0 2026-10-21T01:11:34 <p>Information published.</p> KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure Mariner Linux Yes CVE-2026-98433 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:08 <p>Information published.</p> 2.0 2026-10-20T14:43:58 <p>Information published.</p> 3.0 2026-10-21T18:32:57 <p>Information published.</p> 4.0 2026-10-24T14:44:13 <p>Information published.</p> EDAC/altera: Use parent device for devres in altr_portb_setup() Mariner Linux Yes CVE-2026-98435 21932-17084 21932-17084 Moderate 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:01:32 <p>Information published.</p> 2.0 2026-10-21T18:32:59 <p>Information published.</p> accel/amdxdna: Disable device buffer exporting Mariner Linux Yes CVE-2026-98436 21932-17084 21932-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:17 <p>Information published.</p> 2.0 2026-10-20T14:44:56 <p>Information published.</p> 3.0 2026-10-21T18:33:02 <p>Information published.</p> smb/server: cancel async requests when closing connection Mariner Linux Yes CVE-2026-98439 21932-17084 21932-17084 Moderate 21932-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:04:59 <p>Information published.</p> 2.0 2026-10-21T18:33:06 <p>Information published.</p> RISC-V: KVM: Synchronize hrtimer callback during teardown Mariner Linux Yes CVE-2026-98464 21932-17084 21932-17084 Moderate 21932-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:43:02 <p>Information published.</p> 3.0 2026-10-21T18:34:10 <p>Information published.</p> 1.0 2026-10-20T01:11:11 <p>Information published.</p> 4.0 2026-10-24T14:47:57 <p>Information published.</p> RISC-V: KVM: Serialize IMSIC attributes with vCPU migration Mariner Linux Yes CVE-2026-98465 21932-17084 21932-17084 Moderate 21932-17084 4.5 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:34:13 <p>Information published.</p> 1.0 2026-10-20T01:02:31 <p>Information published.</p> perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() Mariner Linux Yes CVE-2026-98477 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:30 <p>Information published.</p> 2.0 2026-10-20T14:44:50 <p>Information published.</p> 3.0 2026-10-21T18:34:37 <p>Information published.</p> nfc: port100: reject frames whose declared length exceeds the received data Mariner Linux Yes CVE-2026-98481 21932-17084 21932-17084 Moderate 21932-17084 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:04:12 <p>Information published.</p> 2.0 2026-10-20T14:43:06 <p>Information published.</p> 3.0 2026-10-21T18:34:44 <p>Information published.</p> 4.0 2026-10-24T14:50:24 <p>Information published.</p> nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() Mariner Linux Yes CVE-2026-98482 21932-17084 21932-17084 Moderate 21932-17084 5.4 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:48:15 <p>Information published.</p> 3.0 2026-10-21T18:34:46 <p>Information published.</p> 1.0 2026-10-20T01:08:58 <p>Information published.</p> 4.0 2026-10-24T14:47:16 <p>Information published.</p> nfc: fix use-after-free in nfc_get_local_general_bytes Mariner Linux Yes CVE-2026-98483 21932-17084 21932-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:47:18 <p>Information published.</p> 3.0 2026-10-21T18:34:49 <p>Information published.</p> 1.0 2026-10-20T01:06:56 <p>Information published.</p> 4.0 2026-10-24T14:46:35 <p>Information published.</p> PCI: of_property: Omit bus properties without a subordinate bus Mariner Linux Yes CVE-2026-98504 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:10:05 <p>Information published.</p> 2.0 2026-10-20T14:45:51 <p>Information published.</p> 3.0 2026-10-21T18:36:44 <p>Information published.</p> 4.0 2026-10-24T14:49:51 <p>Information published.</p> mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() Mariner Linux Yes CVE-2026-98525 21932-17084 21932-17084 Moderate 21932-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:22 <p>Information published.</p> 2.0 2026-10-20T14:43:24 <p>Information published.</p> 3.0 2026-10-21T18:38:21 <p>Information published.</p> gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() Mariner Linux Yes CVE-2026-98529 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:04:26 <p>Information published.</p> 2.0 2026-10-21T18:38:34 <p>Information published.</p> 3.0 2026-10-24T14:50:28 <p>Information published.</p> workqueue: Fix NULL current_pwq deref in flush dependency check Mariner Linux Yes CVE-2026-98537 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:47:10 <p>Information published.</p> 3.0 2026-10-21T18:39:03 <p>Information published.</p> 1.0 2026-10-20T01:04:16 <p>Information published.</p> 4.0 2026-10-24T14:46:21 <p>Information published.</p> fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga Mariner Linux Yes CVE-2026-98539 21932-17084 21932-17084 Moderate 21932-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:47:22 <p>Information published.</p> 3.0 2026-10-21T18:39:09 <p>Information published.</p> 1.0 2026-10-20T01:06:59 <p>Information published.</p> gve: DQO: reject TSO packets with an out of range MSS Mariner Linux Yes CVE-2026-98556 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:01:39 <p>Information published.</p> 2.0 2026-10-21T18:39:50 <p>Information published.</p> bpf: Fix immediate JMP JEQ/JNE on MIPS32 Mariner Linux Yes CVE-2026-98572 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:31 <p>Information published.</p> 2.0 2026-10-20T14:43:28 <p>Information published.</p> 3.0 2026-10-21T18:40:23 <p>Information published.</p> 4.0 2026-10-24T14:48:12 <p>Information published.</p> nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() Mariner Linux Yes CVE-2026-98575 21932-17084 21932-17084 Low 21932-17084 3.5 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:40:31 <p>Information published.</p> 1.0 2026-10-20T01:03:09 <p>Information published.</p> 3.0 2026-10-24T14:46:08 <p>Information published.</p> nfc: llcp: fix slab-out-of-bounds reads when logging service names Mariner Linux Yes CVE-2026-98576 21932-17084 21932-17084 Moderate 21932-17084 5.9 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:05:20 <p>Information published.</p> 2.0 2026-10-20T14:43:58 <p>Information published.</p> 3.0 2026-10-21T18:40:33 <p>Information published.</p> 4.0 2026-10-24T14:48:42 <p>Information published.</p> nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() Mariner Linux Yes CVE-2026-98577 21932-17084 21932-17084 Moderate 21932-17084 5.3 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:40:36 <p>Information published.</p> 1.0 2026-10-20T01:10:16 <p>Information published.</p> 3.0 2026-10-24T14:47:46 <p>Information published.</p> nfc: st21nfca: validate ISO15693 inventory length Mariner Linux Yes CVE-2026-98578 21932-17084 21932-17084 Moderate 21932-17084 5.2 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:03:03 <p>Information published.</p> 2.0 2026-10-21T18:40:40 <p>Information published.</p> 3.0 2026-10-24T14:50:04 <p>Information published.</p> nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure Mariner Linux Yes CVE-2026-98579 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:06:21 <p>Information published.</p> 2.0 2026-10-21T18:40:43 <p>Information published.</p> 3.0 2026-10-24T14:48:46 <p>Information published.</p> nfc: llcp: Fix race condition in accept_queue lifecycle Mariner Linux Yes CVE-2026-98580 21932-17084 21932-17084 Moderate 21932-17084 5.8 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:20 <p>Information published.</p> 2.0 2026-10-21T18:40:45 <p>Information published.</p> 3.0 2026-10-24T14:48:09 <p>Information published.</p> nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() Mariner Linux Yes CVE-2026-98581 21932-17084 21932-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:16 <p>Information published.</p> 2.0 2026-10-20T14:45:35 <p>Information published.</p> 3.0 2026-10-21T18:40:47 <p>Information published.</p> 4.0 2026-10-24T14:45:11 <p>Information published.</p> nfc: st21nfca: validate received frame size Mariner Linux Yes CVE-2026-98582 21932-17084 21932-17084 Moderate 21932-17084 5.2 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:40:49 <p>Information published.</p> 1.0 2026-10-20T01:04:23 <p>Information published.</p> 3.0 2026-10-24T14:46:25 <p>Information published.</p> nfc: nfcmrvl: validate helper command length before pull Mariner Linux Yes CVE-2026-98583 21932-17084 21932-17084 Moderate 21932-17084 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:12 <p>Information published.</p> 2.0 2026-10-21T18:40:51 <p>Information published.</p> 3.0 2026-10-24T14:44:47 <p>Information published.</p> s390/debug: Fix NULL pointer dereference in debug_info_copy() Mariner Linux Yes CVE-2026-98593 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:40 <p>Information published.</p> 2.0 2026-10-20T14:43:32 <p>Information published.</p> 3.0 2026-10-21T18:41:13 <p>Information published.</p> 4.0 2026-10-24T14:48:21 <p>Information published.</p> drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach Mariner Linux Yes CVE-2026-98605 21932-17084 21932-17084 Moderate 21932-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:48:27 <p>Information published.</p> 3.0 2026-10-21T18:41:44 <p>Information published.</p> 1.0 2026-10-20T01:09:20 <p>Information published.</p> 4.0 2026-10-24T14:47:32 <p>Information published.</p> net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure Mariner Linux Yes CVE-2026-98620 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:47:48 <p>Information published.</p> 3.0 2026-10-21T18:42:16 <p>Information published.</p> 1.0 2026-10-20T01:08:01 <p>Information published.</p> 4.0 2026-10-24T14:46:52 <p>Information published.</p> KVM: s390: Add missing srcu in kvm_s390_set_irq_state() Mariner Linux Yes CVE-2026-98652 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:47 <p>Information published.</p> 2.0 2026-10-20T14:45:19 <p>Information published.</p> 3.0 2026-10-21T18:39:10 <p>Information published.</p> iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure Mariner Linux Yes CVE-2026-98657 21932-17084 21932-17084 Moderate 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:52 <p>Information published.</p> 2.0 2026-10-21T18:39:17 <p>Information published.</p> iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup Mariner Linux Yes CVE-2026-98660 21932-17084 21932-17084 Moderate 21932-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:48:02 <p>Information published.</p> 3.0 2026-10-21T18:39:23 <p>Information published.</p> 1.0 2026-10-20T01:08:36 <p>Information published.</p> iio: light: rohm-bu27034: Fix infinite delay on error Mariner Linux Yes CVE-2026-98661 21932-17084 21932-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:08 <p>Information published.</p> 2.0 2026-10-21T18:39:25 <p>Information published.</p> iio: light: gp2ap020a00f: drain irq_work after free_irq Mariner Linux Yes CVE-2026-98662 21932-17084 21932-17084 Moderate 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:01:50 <p>Information published.</p> 2.0 2026-10-21T18:39:27 <p>Information published.</p> iio: imu: adis16480: fix unprotected debugfs reads Mariner Linux Yes CVE-2026-98663 21932-17084 21932-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:39:29 <p>Information published.</p> 1.0 2026-10-20T01:04:09 <p>Information published.</p> iio: imu: adis16400: fix unprotected debugfs reads Mariner Linux Yes CVE-2026-98664 21932-17084 21932-17084 Moderate 21932-17084 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:48:44 <p>Information published.</p> 3.0 2026-10-21T18:39:32 <p>Information published.</p> 1.0 2026-10-20T01:10:11 <p>Information published.</p> iio: health: max30102: fix NULL dereference in interrupt handler Mariner Linux Yes CVE-2026-98665 21932-17084 21932-17084 Moderate 21932-17084 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:39:34 <p>Information published.</p> 1.0 2026-10-20T01:04:00 <p>Information published.</p> iio: gyro: adis16136: fix unprotected debugfs reads Mariner Linux Yes CVE-2026-98666 21932-17084 21932-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:06:27 <p>Information published.</p> 2.0 2026-10-21T18:39:36 <p>Information published.</p> iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind Mariner Linux Yes CVE-2026-98670 21932-17084 21932-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:28 <p>Information published.</p> 2.0 2026-10-20T14:45:11 <p>Information published.</p> 3.0 2026-10-21T18:39:42 <p>Information published.</p> iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure Mariner Linux Yes CVE-2026-98671 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:17 <p>Information published.</p> 2.0 2026-10-20T14:44:36 <p>Information published.</p> 3.0 2026-10-21T18:39:44 <p>Information published.</p> iio: adc: stm32-adc: fix possible division by zero in processed channel Mariner Linux Yes CVE-2026-98672 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:03:00 <p>Information published.</p> 2.0 2026-10-21T18:39:46 <p>Information published.</p> iio: adc: ad_sigma_delta: fix use-after-free on unbind Mariner Linux Yes CVE-2026-98677 21932-17084 21932-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:06 <p>Information published.</p> 2.0 2026-10-20T14:43:54 <p>Information published.</p> 3.0 2026-10-21T18:39:57 <p>Information published.</p> iio: accel: kxcjk-1013: reject duplicate event disable Mariner Linux Yes CVE-2026-98679 21932-17084 21932-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:47:58 <p>Information published.</p> 3.0 2026-10-21T18:40:03 <p>Information published.</p> 1.0 2026-10-20T01:08:26 <p>Information published.</p> thunderbolt: Reject oversized XDomain properties responses Mariner Linux Yes CVE-2026-98687 21932-17084 21932-17084 Important 21932-17084 8.1 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:47:02 <p>Information published.</p> 3.0 2026-10-21T18:40:21 <p>Information published.</p> 1.0 2026-10-20T01:03:54 <p>Information published.</p> thunderbolt: Fix KASAN reported use-after-free when request is canceled Mariner Linux Yes CVE-2026-98694 21932-17084 21932-17084 Moderate 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:40:34 <p>Information published.</p> 1.0 2026-10-20T01:02:16 <p>Information published.</p> mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ Mariner Linux Yes CVE-2026-98721 21932-17084 21932-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:25 <p>Information published.</p> 2.0 2026-10-20T14:45:06 <p>Information published.</p> 3.0 2026-10-21T18:41:36 <p>Information published.</p> nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() Mariner Linux Yes CVE-2026-98725 21932-17084 21932-17084 Critical 21932-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:48:31 <p>Information published.</p> 3.0 2026-10-21T18:41:45 <p>Information published.</p> 1.0 2026-10-20T01:10:02 <p>Information published.</p> EDAC/altera: Drop __init from ECC setup paths for re-probe safety Mariner Linux Yes CVE-2026-98740 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:16 <p>Information published.</p> 2.0 2026-10-21T18:42:18 <p>Information published.</p> ALSA: ua101: reject mismatched capture/playback packet sizes Mariner Linux Yes CVE-2026-98741 21932-17084 21932-17084 Moderate 21932-17084 6.6 6.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:03:40 <p>Information published.</p> 2.0 2026-10-21T18:42:20 <p>Information published.</p> ALSA: seq: Serialize compat port-info ioctls Mariner Linux Yes CVE-2026-98742 21932-17084 21932-17084 Moderate 21932-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:47:27 <p>Information published.</p> 3.0 2026-10-21T18:42:22 <p>Information published.</p> 1.0 2026-10-20T01:07:09 <p>Information published.</p> ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type Mariner Linux Yes CVE-2026-98743 21932-17084 21932-17084 Low 21932-17084 3.6 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:42:25 <p>Information published.</p> 1.0 2026-10-20T01:08:32 <p>Information published.</p> ASoC: codecs: max98363: fix uninitialized stream_config->type Mariner Linux Yes CVE-2026-98744 21932-17084 21932-17084 Low 21932-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:42:27 <p>Information published.</p> 1.0 2026-10-20T01:07:45 <p>Information published.</p> arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems Mariner Linux Yes CVE-2026-98745 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:46 <p>Information published.</p> 2.0 2026-10-21T18:42:29 <p>Information published.</p> serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() Mariner Linux Yes CVE-2026-98746 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:30 <p>Information published.</p> 2.0 2026-10-21T18:42:33 <p>Information published.</p> tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup Mariner Linux Yes CVE-2026-98754 21932-17084 21932-17084 Moderate 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:39:01 <p>Information published.</p> 1.0 2026-10-20T01:07:58 <p>Information published.</p> tty: vcc: zero-initialize control packet in vcc_send_ctl() Mariner Linux Yes CVE-2026-98755 21932-17084 21932-17084 Moderate 21932-17084 4.3 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:06:57 <p>Information published.</p> 2.0 2026-10-20T14:43:50 <p>Information published.</p> 3.0 2026-10-21T18:39:03 <p>Information published.</p> usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe Mariner Linux Yes CVE-2026-98756 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:08:39 <p>Information published.</p> 2.0 2026-10-20T14:45:05 <p>Information published.</p> 3.0 2026-10-21T18:39:05 <p>Information published.</p> usb: cdns3: fix use-after-free in cdns3_gadget_exit() Mariner Linux Yes CVE-2026-98757 21932-17084 21932-17084 Moderate 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:39:08 <p>Information published.</p> 1.0 2026-10-20T01:03:24 <p>Information published.</p> usb: typec: ucsi: glink: fix use-after-free of ucsi on remove Mariner Linux Yes CVE-2026-98758 21932-17084 21932-17084 Moderate 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:36 <p>Information published.</p> 2.0 2026-10-21T18:39:10 <p>Information published.</p> usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() Mariner Linux Yes CVE-2026-98760 21932-17084 21932-17084 Moderate 21932-17084 6.4 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:04:39 <p>Information published.</p> 2.0 2026-10-21T18:39:14 <p>Information published.</p> usb: typec: tcpm: recover after failure to start the frs ams Mariner Linux Yes CVE-2026-98761 21932-17084 21932-17084 Low 21932-17084 1.8 1.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:39:16 <p>Information published.</p> 1.0 2026-10-20T01:06:19 <p>Information published.</p> usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC Mariner Linux Yes CVE-2026-98764 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:47 <p>Information published.</p> 2.0 2026-10-21T18:39:22 <p>Information published.</p> USB: gadget: dummy-hcd: Fix wait for outstanding request completions Mariner Linux Yes CVE-2026-98765 21932-17084 21932-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:46:34 <p>Information published.</p> 3.0 2026-10-21T18:39:25 <p>Information published.</p> 1.0 2026-10-20T01:01:57 <p>Information published.</p> usb: gadget: aspeed-vhub: cancel wake work on device removal Mariner Linux Yes CVE-2026-98766 21932-17084 21932-17084 Moderate 21932-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:39:27 <p>Information published.</p> 1.0 2026-10-20T01:07:25 <p>Information published.</p> usb: dwc3: gadget: fix IRQ storm on invalid event buffer count Mariner Linux Yes CVE-2026-98767 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:39:29 <p>Information published.</p> 1.0 2026-10-20T01:02:42 <p>Information published.</p> 3.0 2026-10-24T14:45:55 <p>Information published.</p> usb: typec: anx7411 - stop the IRQ before destroying the workqueue Mariner Linux Yes CVE-2026-98768 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:03:50 <p>Information published.</p> 2.0 2026-10-21T18:39:31 <p>Information published.</p> usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd Mariner Linux Yes CVE-2026-98769 21932-17084 21932-17084 Moderate 21932-17084 6.8 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:39:33 <p>Information published.</p> 1.0 2026-10-20T01:06:41 <p>Information published.</p> usb: gadget: midi2: Fix the jack descriptor array sizes Mariner Linux Yes CVE-2026-98770 21932-17084 21932-17084 Moderate 21932-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:52 <p>Information published.</p> 2.0 2026-10-20T14:44:43 <p>Information published.</p> 3.0 2026-10-21T18:39:35 <p>Information published.</p> usb: storage: sierra_ms: reject short SWoC info transfers Mariner Linux Yes CVE-2026-98771 21932-17084 21932-17084 Moderate 21932-17084 4.3 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:46 <p>Information published.</p> 2.0 2026-10-20T14:43:41 <p>Information published.</p> 3.0 2026-10-21T18:39:37 <p>Information published.</p> nitro_enclaves: fix use-after-free on SLOT_ALLOC failure Mariner Linux Yes CVE-2026-98775 21932-17084 21932-17084 Moderate 21932-17084 6.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:48:22 <p>Information published.</p> 3.0 2026-10-21T18:39:43 <p>Information published.</p> 1.0 2026-10-20T01:09:17 <p>Information published.</p> binder: fix leaked fd fixups on TF_UPDATE_TXN supersede Mariner Linux Yes CVE-2026-98777 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:04:35 <p>Information published.</p> 2.0 2026-10-20T14:43:24 <p>Information published.</p> 3.0 2026-10-21T18:39:46 <p>Information published.</p> binder: fix is_failure flag for superseded transaction cleanup Mariner Linux Yes CVE-2026-98778 21932-17084 21932-17084 Moderate 21932-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:10:39 <p>Information published.</p> 2.0 2026-10-20T14:46:21 <p>Information published.</p> 3.0 2026-10-21T18:39:48 <p>Information published.</p> net: sparx5: skip ptp deinit if init was skipped Mariner Linux Yes CVE-2026-98795 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:04:01 <p>Information published.</p> 2.0 2026-10-21T18:40:23 <p>Information published.</p> net: ethernet: mtk_eth_soc: allocate dummy netdev sooner Mariner Linux Yes CVE-2026-98796 21932-17084 21932-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:48:10 <p>Information published.</p> 3.0 2026-10-21T18:40:26 <p>Information published.</p> 1.0 2026-10-20T01:08:54 <p>Information published.</p> net/mctp: publish the mctp_dev only after it is initialised Mariner Linux Yes CVE-2026-98812 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:06:28 <p>Information published.</p> 2.0 2026-10-20T14:44:07 <p>Information published.</p> 3.0 2026-10-21T18:41:11 <p>Information published.</p> rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() Mariner Linux Yes CVE-2026-98825 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:03:58 <p>Information published.</p> 2.0 2026-10-21T18:41:36 <p>Information published.</p> rtc: ac100: Fix clock provider use-after-free on probe failure Mariner Linux Yes CVE-2026-98826 21932-17084 21932-17084 Moderate 21932-17084 6.4 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:04:12 <p>Information published.</p> 2.0 2026-10-21T18:41:38 <p>Information published.</p> wifi: wfx: validate MIB read length before copying to caller Mariner Linux Yes CVE-2026-98830 21932-17084 21932-17084 Moderate 21932-17084 6.8 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-21T18:41:47 <p>Information published.</p> 1.0 2026-10-20T01:04:33 <p>Information published.</p> iio: accel: kionix-kx022a: Fix array boundary check Mariner Linux Yes CVE-2026-98835 21932-17084 21932-17084 Moderate 21932-17084 5.2 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-10-20T14:47:14 <p>Information published.</p> 3.0 2026-10-21T18:41:56 <p>Information published.</p> 1.0 2026-10-20T01:06:29 <p>Information published.</p> ALSA: line6: reject oversized playback packets Mariner Linux Yes CVE-2026-98836 21932-17084 21932-17084 Moderate 21932-17084 6.8 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:07:03 <p>Information published.</p> 2.0 2026-10-21T18:41:59 <p>Information published.</p> ALSA: caiaq: unregister the input device when probe fails Mariner Linux Yes CVE-2026-98837 21932-17084 21932-17084 Moderate 21932-17084 4.6 4.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:09:54 <p>Information published.</p> 2.0 2026-10-20T14:46:11 <p>Information published.</p> 3.0 2026-10-24T14:45:44 <p>Information published.</p> rtc: spear: initialize IRQ state before requesting alarm IRQ Mariner Linux Yes CVE-2026-98847 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-20T01:02:00 <p>Information published.</p> 2.0 2026-10-21T18:42:18 <p>Information published.</p> parisc: Increase kernel stack size to 32kb Mariner Linux Yes CVE-2026-98917 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:07:43 <p>Information published.</p> 2.0 2026-10-25T01:02:53 <p>Information published.</p> 3.0 2026-10-26T14:46:18 <p>Information published.</p> macsec: initialize SecY before registering the netdevice Mariner Linux Yes CVE-2026-98929 21932-17084 21932-17084 Low 21932-17084 3.0 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:08:15 <p>Information published.</p> 2.0 2026-10-25T01:01:36 <p>Information published.</p> 3.0 2026-10-26T14:46:31 <p>Information published.</p> KVM: s390: Fix IRQ injection with SIGP Stop and Store Status Mariner Linux Yes CVE-2026-98930 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:08:21 <p>Information published.</p> 2.0 2026-10-25T01:01:37 <p>Information published.</p> 3.0 2026-10-26T14:46:35 <p>Information published.</p> EDAC/altera: Fix use-after-free in error paths Mariner Linux Yes CVE-2026-98932 21932-17084 21932-17084 Moderate 21932-17084 5.1 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:08:30 <p>Information published.</p> 2.0 2026-10-25T01:01:42 <p>Information published.</p> 3.0 2026-10-26T14:46:45 <p>Information published.</p> wifi: ath11k: reset ar->num_stations on hardware start Mariner Linux Yes CVE-2026-98936 21932-17084 21932-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:08:43 <p>Information published.</p> 2.0 2026-10-25T01:01:47 <p>Information published.</p> 3.0 2026-10-26T14:46:56 <p>Information published.</p> ASoC: qcom: lpass-cpu: use DAI table index for playback constraints Mariner Linux Yes CVE-2026-98940 21932-17084 21932-17084 Moderate 21932-17084 6.7 6.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:08:52 <p>Information published.</p> 2.0 2026-10-25T01:01:51 <p>Information published.</p> 3.0 2026-10-26T14:47:05 <p>Information published.</p> sched_ext: Build the cid tables privately and publish them with RCU Mariner Linux Yes CVE-2026-98942 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:L/A:N 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:08:59 <p>Information published.</p> 2.0 2026-10-25T01:01:53 <p>Information published.</p> 3.0 2026-10-26T14:47:09 <p>Information published.</p> riscv: ptrace: Zero-initialize regset buffers before copyin Mariner Linux Yes CVE-2026-98951 21932-17084 21932-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:09:27 <p>Information published.</p> 2.0 2026-10-25T01:02:10 <p>Information published.</p> 3.0 2026-10-26T14:47:40 <p>Information published.</p> ASoC: adau1372: allow sleepy powerdown GPIOs Mariner Linux Yes CVE-2026-98956 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:09:43 <p>Information published.</p> 2.0 2026-10-25T01:02:15 <p>Information published.</p> 3.0 2026-10-26T14:47:53 <p>Information published.</p> wifi: mt76: mt7915: disable rx napi when removing device Mariner Linux Yes CVE-2026-98957 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:09:45 <p>Information published.</p> 2.0 2026-10-25T01:02:17 <p>Information published.</p> 3.0 2026-10-26T14:47:57 <p>Information published.</p> cxgb4/ch_ktls: disable softirqs around tid_list erases Mariner Linux Yes CVE-2026-98967 21932-17084 21932-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:10:14 <p>Information published.</p> 2.0 2026-10-25T01:02:26 <p>Information published.</p> 3.0 2026-10-26T14:48:14 <p>Information published.</p> amt: send the relay's General Query directly from the receive path Mariner Linux Yes CVE-2026-98968 21932-17084 21932-17084 Important 21932-17084 7.7 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-24T01:10:18 <p>Information published.</p> 2.0 2026-10-25T01:02:28 <p>Information published.</p> 3.0 2026-10-26T14:48:18 <p>Information published.</p> Bluetooth: ISO: Serialize concurrent connect calls Mariner Linux Yes CVE-2026-99012 21932-17084 21932-17084 Important 21932-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-26T14:46:20 <p>Information published.</p> 2.0 2026-10-25T01:04:23 <p>Information published.</p> 1.0 2026-10-25T01:03:24 <p>Information published.</p> scsi: ch: Do not keep references to data transfer element devices Mariner Linux Yes CVE-2026-99019 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-26T14:46:27 <p>Information published.</p> 2.0 2026-10-25T01:04:42 <p>Information published.</p> 1.0 2026-10-25T01:03:31 <p>Information published.</p> regulator: ltc3676: don't read the write-only HRST and CLIRQ registers Mariner Linux Yes CVE-2026-99022 21932-17084 21932-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-26T14:46:36 <p>Information published.</p> 2.0 2026-10-25T01:04:48 <p>Information published.</p> 1.0 2026-10-25T01:03:38 <p>Information published.</p> optee: register TEE devices only once fully initialized Mariner Linux Yes CVE-2026-99024 21932-17084 21932-17084 Moderate 21932-17084 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-26T14:46:41 <p>Information published.</p> 2.0 2026-10-25T01:04:50 <p>Information published.</p> 1.0 2026-10-25T01:03:42 <p>Information published.</p> net: team: free skb when broadcast has no txable port Mariner Linux Yes CVE-2026-99026 21932-17084 21932-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-26T14:46:50 <p>Information published.</p> 2.0 2026-10-25T01:04:53 <p>Information published.</p> 1.0 2026-10-25T01:03:47 <p>Information published.</p> net: team: stop reusing skb after queue override Mariner Linux Yes CVE-2026-99027 21932-17084 21932-17084 Moderate 21932-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-26T14:46:54 <p>Information published.</p> 2.0 2026-10-25T01:04:55 <p>Information published.</p> 1.0 2026-10-25T01:03:49 <p>Information published.</p> memstick: rtsx_usb_ms: complete requests after eject instead of dropping them Mariner Linux Yes CVE-2026-99038 21932-17084 21932-17084 Moderate 21932-17084 4.2 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-26T14:47:27 <p>Information published.</p> 2.0 2026-10-25T01:05:18 <p>Information published.</p> 1.0 2026-10-25T01:04:16 <p>Information published.</p> ibmveth: h_free logical LAN on open-fail after register Mariner Linux Yes CVE-2026-99045 21932-17084 21932-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-26T14:47:48 <p>Information published.</p> 2.0 2026-10-25T01:05:31 <p>Information published.</p> 1.0 2026-10-25T01:04:33 <p>Information published.</p> ksmbd: fix heap out-of-bounds write in krb5_authenticate() Mariner Linux Yes CVE-2026-99083 21932-17084 21932-17084 Important 21932-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-26T14:49:20 <p>Information published.</p> 2.0 2026-10-25T01:06:56 <p>Information published.</p> 1.0 2026-10-25T01:05:28 <p>Information published.</p> wifi: mwifiex: prevent authentication frame length truncation Mariner Linux Yes CVE-2026-98184 1.0 2026-10-20T22:23:49 <p>Information published.</p> mm: filemap: retain mapped dropbehind folios Mariner Linux Yes CVE-2026-98223 1.0 2026-10-20T22:23:17 <p>Information published.</p> mm/vma: correctly unaccount on mmap_prepare() failure Mariner Linux Yes CVE-2026-98224 1.0 2026-10-20T22:23:19 <p>Information published.</p> mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count Mariner Linux Yes CVE-2026-98226 1.0 2026-10-20T22:23:20 <p>Information published.</p> mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ Mariner Linux Yes CVE-2026-98228 1.0 2026-10-20T22:23:22 <p>Information published.</p> xfrm: use hlist_del_init_rcu for state_cache and state_cache_input Mariner Linux Yes CVE-2026-98230 1.0 2026-10-20T22:23:24 <p>Information published.</p> net/sched: act_api: release tail references on DELACTION failure Mariner Linux Yes CVE-2026-98235 1.0 2026-10-20T22:23:30 <p>Information published.</p> net: ip_tunnel: initialize `options_len` before referencing options Mariner Linux Yes CVE-2026-98240 1.0 2026-10-20T22:23:33 <p>Information published.</p> btrfs: clear free space tree creation state on rebuild failure Mariner Linux Yes CVE-2026-98244 1.0 2026-10-20T22:23:35 <p>Information published.</p> signal: Prevent exec() race Mariner Linux Yes CVE-2026-98256 1.0 2026-10-20T22:23:41 <p>Information published.</p> posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Mariner Linux Yes CVE-2026-98258 1.0 2026-10-20T22:23:43 <p>Information published.</p> fs/dax: check zero or empty entry before converting xarray entry Mariner Linux Yes CVE-2026-98259 1.0 2026-10-20T22:23:44 <p>Information published.</p> 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Mariner Linux Yes CVE-2026-98267 1.0 2026-10-20T22:23:48 <p>Information published.</p> net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() Mariner Linux Yes CVE-2026-98274 1.0 2026-10-20T22:23:51 <p>Information published.</p> eth: fbnic: ring the doorbell if a burst ends in a drop Mariner Linux Yes CVE-2026-98277 1.0 2026-10-20T22:23:54 <p>Information published.</p> futex: Also allocate private hash on vfork() Mariner Linux Yes CVE-2026-98281 1.0 2026-10-20T22:23:55 <p>Information published.</p> Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit Mariner Linux Yes CVE-2026-98291 1.0 2026-10-20T22:24:00 <p>Information published.</p> Bluetooth: btintel_pcie: validate TX skb length in send_sync Mariner Linux Yes CVE-2026-98296 1.0 2026-10-20T22:24:02 <p>Information published.</p> smb: client: validate absolute native symlink targets before NT fixups Mariner Linux Yes CVE-2026-98318 1.0 2026-10-20T22:23:22 <p>Information published.</p> wifi: cfg80211: don't get the radio mask for netdev-less wdevs Mariner Linux Yes CVE-2026-98346 1.0 2026-10-20T22:23:33 <p>Information published.</p> wifi: brcmfmac: cyw: pass PMKID to firmware if present Mariner Linux Yes CVE-2026-98350 1.0 2026-10-20T22:23:36 <p>Information published.</p> RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup Mariner Linux Yes CVE-2026-98356 1.0 2026-10-20T22:23:40 <p>Information published.</p> RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths Mariner Linux Yes CVE-2026-98361 1.0 2026-10-20T22:23:44 <p>Information published.</p> xfrm: iptfs: fix runt reassembly panic from short inner tot_len Mariner Linux Yes CVE-2026-98371 1.0 2026-10-20T22:23:49 <p>Information published.</p> xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() Mariner Linux Yes CVE-2026-98372 1.0 2026-10-20T22:23:50 <p>Information published.</p> bpf: Use array_map_meta_equal for percpu array inner map replacement Mariner Linux Yes CVE-2026-98376 1.0 2026-10-20T22:23:54 <p>Information published.</p> x86/amd_node: Avoid divide by zero on virtualized systems Mariner Linux Yes CVE-2026-98390 1.0 2026-10-20T22:24:00 <p>Information published.</p> Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one Mariner Linux Yes CVE-2026-98392 1.0 2026-10-20T22:24:02 <p>Information published.</p> watchdog: rzv2h: Avoid division by zero Mariner Linux Yes CVE-2026-98408 1.0 2026-10-20T22:24:08 <p>Information published.</p> power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() Mariner Linux Yes CVE-2026-98411 1.0 2026-10-20T22:24:10 <p>Information published.</p> power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() Mariner Linux Yes CVE-2026-98412 1.0 2026-10-20T22:24:14 <p>Information published.</p> memcg: avoid charging the root memcg from obj_cgroup_charge_pages() Mariner Linux Yes CVE-2026-98414 1.0 2026-10-20T22:24:15 <p>Information published.</p> soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node Mariner Linux Yes CVE-2026-98415 1.0 2026-10-20T22:24:17 <p>Information published.</p> RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency Mariner Linux Yes CVE-2026-98431 1.0 2026-10-20T22:23:24 <p>Information published.</p> media: qcom: iris: fix runtime PM reference leaks Mariner Linux Yes CVE-2026-98437 1.0 2026-10-20T22:23:27 <p>Information published.</p> KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction Mariner Linux Yes CVE-2026-98440 1.0 2026-10-20T22:23:29 <p>Information published.</p> xfs: drop dquot flush lock when we can't find a buffer to flush Mariner Linux Yes CVE-2026-98444 1.0 2026-10-20T22:23:31 <p>Information published.</p> xfs: don't let memory failures leak blocks and kill repairs Mariner Linux Yes CVE-2026-98445 1.0 2026-10-20T22:23:33 <p>Information published.</p> xfs: don't let hidden_space go negative in xfs_metafile_resv_init Mariner Linux Yes CVE-2026-98446 1.0 2026-10-20T22:23:35 <p>Information published.</p> xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots Mariner Linux Yes CVE-2026-98447 1.0 2026-10-20T22:23:36 <p>Information published.</p> xfs: release orphanage dir inode if chown fails Mariner Linux Yes CVE-2026-98448 1.0 2026-10-20T22:23:38 <p>Information published.</p> KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race Mariner Linux Yes CVE-2026-98467 1.0 2026-10-20T22:23:46 <p>Information published.</p> KVM: arm64: Fix spurious warning for benign stage 2 teardown race Mariner Linux Yes CVE-2026-98468 1.0 2026-10-20T22:23:48 <p>Information published.</p> KVM: arm64: Fix AArch32 DBGBXVR<n> handling Mariner Linux Yes CVE-2026-98469 1.0 2026-10-20T22:23:49 <p>Information published.</p> KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV Mariner Linux Yes CVE-2026-98472 1.0 2026-10-20T22:23:51 <p>Information published.</p> s390/pci: Fix missing device lock in zpci_report_status() Mariner Linux Yes CVE-2026-98474 1.0 2026-10-20T22:23:53 <p>Information published.</p> s390/cmf: Fix virtual vs physical address confusion Mariner Linux Yes CVE-2026-98475 1.0 2026-10-20T22:23:54 <p>Information published.</p> nfc: trf7970a: power down on startup RX gain failure Mariner Linux Yes CVE-2026-98480 1.0 2026-10-20T22:23:57 <p>Information published.</p> net: bridge: mdb: restart port group walk after deletion Mariner Linux Yes CVE-2026-98487 1.0 2026-10-20T22:24:02 <p>Information published.</p> net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths Mariner Linux Yes CVE-2026-98492 1.0 2026-10-20T22:24:05 <p>Information published.</p> net: airoha: npu: cancel wdt_work after releasing the WDT IRQ Mariner Linux Yes CVE-2026-98496 1.0 2026-10-20T22:24:08 <p>Information published.</p> net/mlx5e: fix swapped IPv6 IPsec policy masks Mariner Linux Yes CVE-2026-98497 1.0 2026-10-20T22:24:09 <p>Information published.</p> drm/xe/vm: nuke PTs only after unlinking contested VMAs Mariner Linux Yes CVE-2026-98510 1.0 2026-10-20T22:24:17 <p>Information published.</p> drm/nouveau: RCU-free the scheduler-containing nouveau_sched Mariner Linux Yes CVE-2026-98512 1.0 2026-10-20T22:24:19 <p>Information published.</p> drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() Mariner Linux Yes CVE-2026-98513 1.0 2026-10-20T22:24:20 <p>Information published.</p> drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() Mariner Linux Yes CVE-2026-98522 1.0 2026-10-20T22:24:25 <p>Information published.</p> drm/client: fix restore of partially initialized client Mariner Linux Yes CVE-2026-98523 1.0 2026-10-20T22:24:28 <p>Information published.</p> gpio: cdev: fix kernel stack leak to user-space in error path Mariner Linux Yes CVE-2026-98528 1.0 2026-10-20T22:24:31 <p>Information published.</p> ipe: protect the dm-verity root hash with RCU Mariner Linux Yes CVE-2026-98533 1.0 2026-10-20T22:24:34 <p>Information published.</p> ipe: fix use-after-free when auditing a newly loaded policy Mariner Linux Yes CVE-2026-98534 1.0 2026-10-20T22:23:31 <p>Information published.</p> cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict Mariner Linux Yes CVE-2026-98542 1.0 2026-10-20T22:23:34 <p>Information published.</p> bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir Mariner Linux Yes CVE-2026-98543 1.0 2026-10-20T22:23:36 <p>Information published.</p> arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 Mariner Linux Yes CVE-2026-98546 1.0 2026-10-20T22:23:38 <p>Information published.</p> perf/core: Fix a refcount leak in attach_perf_ctx_data() Mariner Linux Yes CVE-2026-98552 1.0 2026-10-20T22:23:43 <p>Information published.</p> net: libwx: fix races in Tx timestamp handling Mariner Linux Yes CVE-2026-98562 1.0 2026-10-20T22:23:47 <p>Information published.</p> net: phylink: record the PHY only once bringup cannot fail Mariner Linux Yes CVE-2026-98563 1.0 2026-10-20T22:23:49 <p>Information published.</p> net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq Mariner Linux Yes CVE-2026-98564 1.0 2026-10-20T22:23:50 <p>Information published.</p> drm/imagination: clamp freelist reconstruction requests Mariner Linux Yes CVE-2026-98566 1.0 2026-10-20T22:23:52 <p>Information published.</p> net: stmmac: clear stale buf->page after recycling on skb build failure Mariner Linux Yes CVE-2026-98571 1.0 2026-10-20T22:23:56 <p>Information published.</p> net: bcmgenet: stop Tx NAPI before disabling the queues Mariner Linux Yes CVE-2026-98574 1.0 2026-10-20T22:23:59 <p>Information published.</p> net/sched: fix potential stack infoleak in em_text_dump() Mariner Linux Yes CVE-2026-98584 1.0 2026-10-20T22:24:04 <p>Information published.</p> eth: fbnic: Avoid rounding zero ring sizes Mariner Linux Yes CVE-2026-98585 1.0 2026-10-20T22:24:06 <p>Information published.</p> net: spacemit: clear TX descriptor on fragment mapping failure Mariner Linux Yes CVE-2026-98592 1.0 2026-10-20T22:24:09 <p>Information published.</p> udp: remove a disconnected socket from the 4-tuple hash table Mariner Linux Yes CVE-2026-98595 1.0 2026-10-20T22:24:11 <p>Information published.</p> ipv6: Fix dst leak for uncached routes. Mariner Linux Yes CVE-2026-98596 1.0 2026-10-20T22:24:13 <p>Information published.</p> Bluetooth: btintel_pcie: validate device-supplied DMA indices Mariner Linux Yes CVE-2026-98601 1.0 2026-10-20T22:24:15 <p>Information published.</p> ovpn: replace bind when clearing stale local source Mariner Linux Yes CVE-2026-98603 1.0 2026-10-20T22:24:17 <p>Information published.</p> ovpn: replace bind when learning local endpoint Mariner Linux Yes CVE-2026-98604 1.0 2026-10-20T22:24:18 <p>Information published.</p> bpf: Check params size before reading reserved fields Mariner Linux Yes CVE-2026-98611 1.0 2026-10-20T22:24:21 <p>Information published.</p> bpf: Bound ownership depth through local kptrs and graph roots Mariner Linux Yes CVE-2026-98613 1.0 2026-10-20T22:24:25 <p>Information published.</p> eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox Mariner Linux Yes CVE-2026-98615 1.0 2026-10-20T22:24:28 <p>Information published.</p> eth: fbnic: reset num_napi when the napi vectors are freed Mariner Linux Yes CVE-2026-98616 1.0 2026-10-20T22:24:30 <p>Information published.</p> eth: fbnic: use the Rx queue napi pointer to find the napi vector Mariner Linux Yes CVE-2026-98617 1.0 2026-10-20T22:24:31 <p>Information published.</p> eth: fbnic: Handle maximum standalone channels Mariner Linux Yes CVE-2026-98618 1.0 2026-10-20T22:24:33 <p>Information published.</p> eth: fbnic: Fix payload page pool error cleanup Mariner Linux Yes CVE-2026-98630 1.0 2026-10-20T22:24:38 <p>Information published.</p> Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() Mariner Linux Yes CVE-2026-98633 1.0 2026-10-20T22:24:43 <p>Information published.</p> KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure Mariner Linux Yes CVE-2026-98637 1.0 2026-10-20T22:24:46 <p>Information published.</p> KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() Mariner Linux Yes CVE-2026-98638 1.0 2026-10-20T22:24:47 <p>Information published.</p> KVM: riscv: Fix NACL hfence entry update order Mariner Linux Yes CVE-2026-98639 1.0 2026-10-20T22:24:49 <p>Information published.</p> bpf, arm64: set up the frame pointer for the exception callback Mariner Linux Yes CVE-2026-98641 1.0 2026-10-20T22:24:50 <p>Information published.</p> s390/uv: Prevent potential out-of-bounds read Mariner Linux Yes CVE-2026-98648 1.0 2026-10-20T22:23:44 <p>Information published.</p> iio: proximity: aw96103: validate firmware data length Mariner Linux Yes CVE-2026-98658 1.0 2026-10-20T22:23:47 <p>Information published.</p> iio: pressure: rohm-bm1390: Return error when read fails Mariner Linux Yes CVE-2026-98659 1.0 2026-10-20T22:23:49 <p>Information published.</p> iio: adc: pac1934: check ACPI label duplication Mariner Linux Yes CVE-2026-98673 1.0 2026-10-20T22:23:55 <p>Information published.</p> iio: adc: adi-axi-adc: Initialize state mutex Mariner Linux Yes CVE-2026-98674 1.0 2026-10-20T22:23:57 <p>Information published.</p> iio: adc: ade9000: handle Phase C dip events in IRQ1 handler Mariner Linux Yes CVE-2026-98675 1.0 2026-10-20T22:23:59 <p>Information published.</p> iio: adc: ade9000: fix NULL pointer dereference in clkout registration Mariner Linux Yes CVE-2026-98676 1.0 2026-10-20T22:24:00 <p>Information published.</p> iio: adc: ad4030: fix invalid oversampling_ratio validation Mariner Linux Yes CVE-2026-98678 1.0 2026-10-20T22:24:02 <p>Information published.</p> iio: accel: kionix-kx022a: Prevent memory leak and fix state Mariner Linux Yes CVE-2026-98680 1.0 2026-10-20T22:24:04 <p>Information published.</p> smb: client: drain and invalidate before server-side copy/clone Mariner Linux Yes CVE-2026-98682 1.0 2026-10-20T22:24:06 <p>Information published.</p> smb: client: flush dirty data before zeroing a range Mariner Linux Yes CVE-2026-98683 1.0 2026-10-20T22:24:07 <p>Information published.</p> thunderbolt: Don't access a DP tunnel after its DPRX read was canceled Mariner Linux Yes CVE-2026-98689 1.0 2026-10-20T22:24:11 <p>Information published.</p> thunderbolt: Fix domain reference leak when DPRX read is canceled Mariner Linux Yes CVE-2026-98690 1.0 2026-10-20T22:24:14 <p>Information published.</p> thunderbolt: Tear down inactive DP tunnels when the domain is stopped Mariner Linux Yes CVE-2026-98691 1.0 2026-10-20T22:24:15 <p>Information published.</p> thunderbolt: Make the DP tunnel activation callback mandatory Mariner Linux Yes CVE-2026-98692 1.0 2026-10-20T22:24:17 <p>Information published.</p> thunderbolt: Hold a router reference for each allocated HopID Mariner Linux Yes CVE-2026-98693 1.0 2026-10-20T22:24:18 <p>Information published.</p> wifi: mac80211: reject invalid 320 MHz CSA bandwidth Mariner Linux Yes CVE-2026-98702 1.0 2026-10-20T22:24:23 <p>Information published.</p> KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT Mariner Linux Yes CVE-2026-98713 1.0 2026-10-20T22:24:28 <p>Information published.</p> nvmet: copy the hostid into the ctrl before creating PR pc_refs Mariner Linux Yes CVE-2026-98723 1.0 2026-10-20T22:24:33 <p>Information published.</p> nvmet: pci-epf: reject too-short SGL segments Mariner Linux Yes CVE-2026-98724 1.0 2026-10-20T22:24:34 <p>Information published.</p> nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known Mariner Linux Yes CVE-2026-98727 1.0 2026-10-20T22:24:37 <p>Information published.</p> tpm: fix off-by-four bounds check in tpm2_get_random() Mariner Linux Yes CVE-2026-98728 1.0 2026-10-20T22:24:38 <p>Information published.</p> x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h Mariner Linux Yes CVE-2026-98729 1.0 2026-10-20T22:24:40 <p>Information published.</p> Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() Mariner Linux Yes CVE-2026-98730 1.0 2026-10-20T22:24:42 <p>Information published.</p> Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() Mariner Linux Yes CVE-2026-98731 1.0 2026-10-20T22:24:43 <p>Information published.</p> usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() Mariner Linux Yes CVE-2026-98759 1.0 2026-10-20T22:23:54 <p>Information published.</p> rust_binder: cancel deferred work items in thread exit Mariner Linux Yes CVE-2026-98774 1.0 2026-10-20T22:24:00 <p>Information published.</p> futex: Fix private hash use-after-free on resize Mariner Linux Yes CVE-2026-98788 1.0 2026-10-20T22:24:08 <p>Information published.</p> net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference Mariner Linux Yes CVE-2026-98791 1.0 2026-10-20T22:24:10 <p>Information published.</p> net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() Mariner Linux Yes CVE-2026-98804 1.0 2026-10-20T22:24:16 <p>Information published.</p> octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled Mariner Linux Yes CVE-2026-98806 1.0 2026-10-20T22:24:17 <p>Information published.</p> mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() Mariner Linux Yes CVE-2026-98818 1.0 2026-10-20T22:24:22 <p>Information published.</p> block: reject polled dio with user integrity metadata Mariner Linux Yes CVE-2026-98821 1.0 2026-10-20T22:24:24 <p>Information published.</p> virt: vmgenid: set driver_data before registering notification handlers Mariner Linux Yes CVE-2026-98841 1.0 2026-10-20T22:24:31 <p>Information published.</p> module: fix lost error code from codetag_load_module() Mariner Linux Yes CVE-2026-98842 1.0 2026-10-20T22:24:33 <p>Information published.</p> netfs: zero gaps in read-gaps folio to avoid writing back stale data Mariner Linux Yes CVE-2026-98843 1.0 2026-10-20T22:24:34 <p>Information published.</p> netfs: clear post-EOF pagecache when extending a file via write Mariner Linux Yes CVE-2026-98844 1.0 2026-10-20T22:24:35 <p>Information published.</p> tpm: Disable TPM on null key name mismatch Mariner Linux Yes CVE-2026-98845 1.0 2026-10-20T22:24:37 <p>Information published.</p> pfcp: fix socket lifetime on netdevice registration failure Mariner Linux Yes CVE-2026-98849 1.0 2026-10-20T22:24:39 <p>Information published.</p> io_uring: fix task_work add use-after-free with SQPOLL Mariner Linux Yes CVE-2026-98858 1.0 2026-10-20T22:24:43 <p>Information published.</p> dm-pcache: bound the logical key offset from persistent memory Mariner Linux Yes CVE-2026-98867 1.0 2026-10-20T22:23:59 <p>Information published.</p> dm-pcache: reject a kset that overruns its segment Mariner Linux Yes CVE-2026-98868 1.0 2026-10-20T22:24:00 <p>Information published.</p> ammonia allows stored XSS through unsanitized SVG animate and set attributes Mariner GitHub_M Yes CVE-2026-102342 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 21840-17084 21918-17084 21840-17084 21918-17084 Moderate 21840-17084 Moderate 21918-17084 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N 21840-17084 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N 21918-17084 Release Notes 21840-17084 21918-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21840-17084 21918-17084 Release Notes 1.0 2026-10-15T01:11:11 <p>Information published.</p> Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Mariner elastic Yes CVE-2026-102404 Uncontrolled Resource Consumption 20188-17084 20188-17084 Moderate 20188-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20188-17084 Release Notes 20188-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20188-17084 Release Notes 1.0 2026-10-08T01:16:18 <p>Information published.</p> Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification Mariner elastic Yes CVE-2026-102407 Incorrect Authorization 20188-17084 20188-17084 Moderate 20188-17084 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 20188-17084 Release Notes 20188-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20188-17084 Release Notes 1.0 2026-10-08T01:15:54 <p>Information published.</p> Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Mariner elastic Yes CVE-2026-102411 Allocation of Resources Without Limits or Throttling 20188-17084 20188-17084 Moderate 20188-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20188-17084 Release Notes 20188-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20188-17084 Release Notes 1.0 2026-10-08T01:16:40 <p>Information published.</p> Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Mariner elastic Yes CVE-2026-103006 Uncontrolled Recursion 20188-17084 20188-17084 Moderate 20188-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20188-17084 Release Notes 20188-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20188-17084 Release Notes 1.0 2026-10-08T01:17:11 <p>Information published.</p> Canimaan Software ClamXAV local privilege escalation Mariner cisa-cg Yes CVE-2026-105773 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 21850-17084 21850-17084 Important 21850-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21850-17084 Release Notes 21850-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21850-17084 Release Notes 1.0 2026-10-07T01:01:46 <p>Information published.</p> In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack of support for file-descriptor passing and unprivileged allocation of PTY devices. Mariner mitre Yes CVE-2026-106589 Least Privilege Violation 21837-17084 21837-17084 Low 21837-17084 2.9 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 21837-17084 Release Notes 21837-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Release Notes 1.0 2026-10-08T01:13:33 <p>Information published.</p> msgpack5: Decoding negative int64 values mutates the input buffer Mariner GitHub_M Yes CVE-2026-107296 Modification of Assumed-Immutable Data (MAID) 21665-17084 21665-17084 Low 21665-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 21665-17084 Release Notes 21665-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21665-17084 Release Notes 1.0 2026-10-10T01:04:31 <p>Information published.</p> msgpack5: Quadratic parsing in the streaming decoder Mariner GitHub_M Yes CVE-2026-107297 Inefficient Algorithmic Complexity 21665-17084 21665-17084 Moderate 21665-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21665-17084 Release Notes 21665-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21665-17084 Release Notes 1.0 2026-10-10T01:02:56 <p>Information published.</p> msgpack5: Deeply nested input can exhaust the decoder stack Mariner GitHub_M Yes CVE-2026-107298 Uncontrolled Recursion 21665-17084 21665-17084 Moderate 21665-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21665-17084 Release Notes 21665-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21665-17084 Release Notes 1.0 2026-10-10T01:05:18 <p>Information published.</p> msgpack5: Reserved byte can cause unbounded stream buffering Mariner GitHub_M Yes CVE-2026-107299 Improper Handling of Syntactically Invalid Structure 21665-17084 21665-17084 Moderate 21665-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21665-17084 Release Notes 21665-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21665-17084 Release Notes 1.0 2026-10-10T01:03:45 <p>Information published.</p> msgpack5: Many buffered values can exhaust the streaming decoder stack Mariner GitHub_M Yes CVE-2026-107300 Uncontrolled Recursion 21665-17084 21665-17084 Important 21665-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21665-17084 Release Notes 21665-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21665-17084 Release Notes 1.0 2026-10-10T01:04:07 <p>Information published.</p> msgpack5: Partial options disable prototype protection Mariner GitHub_M Yes CVE-2026-107301 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 21665-17084 21665-17084 Moderate 21665-17084 6.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L 21665-17084 Release Notes 21665-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21665-17084 Release Notes 1.0 2026-10-10T01:04:56 <p>Information published.</p> msgpack5: Truncated map32 headers throw an unexpected error Mariner GitHub_M Yes CVE-2026-107302 Out-of-bounds Read 21665-17084 21665-17084 Important 21665-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21665-17084 Release Notes 21665-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21665-17084 Release Notes 1.0 2026-10-10T01:03:20 <p>Information published.</p> MIT krb5 through 1.22.2 KDC NULL Pointer Dereference via S4U2Proxy PAC Mariner VulnCheck Yes CVE-2026-107708 NULL Pointer Dereference 0-17084 0-17084 Moderate 0-17084 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 0-17084 Release Notes 0-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-10T01:02:09 <p>Information published.</p> AdonisJS: Unencoded route parameters can produce open redirects Mariner GitHub_M Yes CVE-2026-107718 URL Redirection to Untrusted Site ('Open Redirect') 0-17084 0-17084 Moderate 0-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 0-17084 Release Notes 0-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-10T01:01:42 <p>Information published.</p> Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session Mariner GitHub_M Yes CVE-2026-108266 Origin Validation Error 21915-17084 21840-17084 21918-17084 21915-17084 21840-17084 21918-17084 Critical 21915-17084 Critical 21840-17084 Critical 21918-17084 Release Notes 21915-17084 21840-17084 21918-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21915-17084 21840-17084 21918-17084 Release Notes 1.0 2026-10-13T01:19:29 <p>Information published.</p> Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session Mariner GitHub_M Yes CVE-2026-108267 Origin Validation Error 18315-17084 21857-17084 21809-17084 19693-17084 21021-17084 18315-17084 21857-17084 21809-17084 19693-17084 21021-17084 Critical 18315-17084 Critical 21857-17084 Critical 21809-17084 Critical 19693-17084 Critical 21021-17084 Release Notes 18315-17084 21857-17084 21809-17084 19693-17084 21021-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 18315-17084 21857-17084 21809-17084 19693-17084 21021-17084 Release Notes 1.0 2026-10-13T01:17:31 <p>Information published.</p> Root.Mkdir(All) can follow junctions out of the root on Windows in os Mariner Go Yes CVE-2026-56857 Insecure Operation on Windows Junction / Mount Point 21857-17084 21809-17084 21857-17084 21809-17084 Critical 21857-17084 Critical 21809-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21857-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21809-17084 Release Notes 21857-17084 21809-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 21809-17084 Release Notes 1.0 2026-10-11T01:54:56 <p>Information published.</p> 2.0 2026-10-12T15:38:19 <p>Information published.</p> Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation Mariner apache Yes CVE-2026-61373 Allocation of Resources Without Limits or Throttling 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:49:49 <p>Information published.</p> 2.0 2026-10-10T14:56:59 <p>Information published.</p> 3.0 2026-10-13T01:49:55 <p>Information published.</p> Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit Mariner apache Yes CVE-2026-61374 Allocation of Resources Without Limits or Throttling 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:04:41 <p>Information published.</p> 2.0 2026-10-10T15:01:21 <p>Information published.</p> 3.0 2026-10-13T01:53:45 <p>Information published.</p> IKEv2 pre-authentication Null Pointer Dereference in EAP code Mariner libreswan Yes CVE-2026-77206 NULL Pointer Dereference 0-17084 0-17084 Important 0-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 0-17084 Release Notes 0-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-15T01:08:36 <p>Information published.</p> Apache Thrift: Perl TLS client disables certificate verification by default Mariner apache Yes CVE-2026-85086 Improper Certificate Validation 0-17084 0-17084 Moderate 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 2.0 2026-10-10T15:00:33 <p>Information published.</p> 3.0 2026-10-13T01:57:47 <p>Information published.</p> 1.0 2026-10-03T01:01:45 <p>Information published.</p> Apache Thrift, Apache Thrift: TProtocolUtil.skip follows peer-chosen nesting to any depth the stack allows (Dart, Java ME) Mariner apache Yes CVE-2026-85493 Uncontrolled Recursion 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:04:12 <p>Information published.</p> 2.0 2026-10-10T15:00:56 <p>Information published.</p> 3.0 2026-10-13T01:53:23 <p>Information published.</p> Apache Thrift: A JSON member name can stall the Node server's event loop indefinitely Mariner apache Yes CVE-2026-86535 Loop with Unreachable Exit Condition ('Infinite Loop') 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 2.0 2026-10-10T15:01:23 <p>Information published.</p> 3.0 2026-10-13T01:58:33 <p>Information published.</p> 1.0 2026-10-03T01:02:33 <p>Information published.</p> Apache Thrift, Apache Thrift, Apache Thrift: A map key from the wire can replace a decoded object's prototype in generated JavaScript Mariner apache Yes CVE-2026-86536 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 0-17084 0-17084 Moderate 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 2.0 2026-10-10T15:03:03 <p>Information published.</p> 3.0 2026-10-13T02:00:06 <p>Information published.</p> 1.0 2026-10-03T01:04:03 <p>Information published.</p> Apache Thrift: A truncated HTTP request stops the D library's server, allowing an unauthenticated remote attacker to deny service Mariner apache Yes CVE-2026-86537 Uncaught Exception 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:41:48 <p>Information published.</p> 3.0 2026-10-13T02:39:26 <p>Information published.</p> 2.0 2026-10-10T14:50:58 <p>Information published.</p> Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec Mariner apache Yes CVE-2026-87117 NULL Pointer Dereference 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:50:22 <p>Information published.</p> 2.0 2026-10-10T14:57:27 <p>Information published.</p> 3.0 2026-10-13T01:50:17 <p>Information published.</p> Apache Thrift: An exception escaping a libevent callback stops the D library's non-blocking server, allowing an unauthenticated remote attacker to deny service Mariner apache Yes CVE-2026-90440 Uncaught Exception 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:43:25 <p>Information published.</p> 2.0 2026-10-10T14:52:40 <p>Information published.</p> 3.0 2026-10-13T01:44:49 <p>Information published.</p> Apache Thrift: PHP `thrift_protocol` accelerator: zero-byte container elements Mariner apache Yes CVE-2026-91137 Improper Validation of Specified Quantity in Input 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:02:09 <p>Information published.</p> 2.0 2026-10-10T14:59:13 <p>Information published.</p> 3.0 2026-10-13T01:51:51 <p>Information published.</p> Apache Thrift: Dart `TBinaryProtocol.readMessageBegin` allocates from the pre-versioned name length Mariner apache Yes CVE-2026-94633 Memory Allocation with Excessive Size Value 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:44:47 <p>Information published.</p> 2.0 2026-10-10T14:53:33 <p>Information published.</p> 3.0 2026-10-13T01:45:35 <p>Information published.</p> Apache Thrift: Lua `TBinaryProtocol:readMessageBegin` bypasses `checkStringSize` on the pre-versioned name Mariner apache Yes CVE-2026-94635 Allocation of Resources Without Limits or Throttling 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:03:42 <p>Information published.</p> 2.0 2026-10-10T15:00:31 <p>Information published.</p> 3.0 2026-10-13T01:53:00 <p>Information published.</p> Apache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize` Mariner apache Yes CVE-2026-94638 Allocation of Resources Without Limits or Throttling 0-17084 0-17084 Moderate 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:42:38 <p>Information published.</p> 2.0 2026-10-10T14:51:49 <p>Information published.</p> 3.0 2026-10-13T01:44:02 <p>Information published.</p> Apache Thrift: Java `TSaslNonblockingServer`: residual of CVE-2026-61373 (thread-death black hole + no cross-connection budget) Mariner apache Yes CVE-2026-94639 Improper Handling of Exceptional Conditions 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:40:59 <p>Information published.</p> 3.0 2026-10-13T02:38:41 <p>Information published.</p> 2.0 2026-10-10T14:50:09 <p>Information published.</p> Apache Thrift: PHP `TSimpleServer` exits the whole process on any non-transport exception Mariner apache Yes CVE-2026-94642 Uncaught Exception 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:48:48 <p>Information published.</p> 2.0 2026-10-10T14:56:07 <p>Information published.</p> 3.0 2026-10-13T01:49:06 <p>Information published.</p> Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound Mariner apache Yes CVE-2026-94644 Allocation of Resources Without Limits or Throttling 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:46:16 <p>Information published.</p> 2.0 2026-10-10T14:54:24 <p>Information published.</p> 3.0 2026-10-13T01:46:23 <p>Information published.</p> Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound Mariner apache Yes CVE-2026-94645 Improper Validation of Specified Quantity in Input 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 2.0 2026-10-10T15:02:14 <p>Information published.</p> 3.0 2026-10-13T01:59:20 <p>Information published.</p> 1.0 2026-10-03T01:03:17 <p>Information published.</p> Apache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers) Mariner apache Yes CVE-2026-94646 Uncaught Exception 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 2.0 2026-10-10T15:02:38 <p>Information published.</p> 3.0 2026-10-13T01:59:43 <p>Information published.</p> 1.0 2026-10-03T01:03:41 <p>Information published.</p> Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound Mariner apache Yes CVE-2026-94648 Allocation of Resources Without Limits or Throttling 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:03:13 <p>Information published.</p> 2.0 2026-10-10T15:00:06 <p>Information published.</p> 3.0 2026-10-13T01:52:37 <p>Information published.</p> Apache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse error Mariner apache Yes CVE-2026-94651 Improper Handling of Exceptional Conditions 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:47:37 <p>Information published.</p> 2.0 2026-10-10T14:55:16 <p>Information published.</p> 3.0 2026-10-13T01:48:19 <p>Information published.</p> Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic) Mariner apache Yes CVE-2026-94653 Inefficient Algorithmic Complexity 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:42:14 <p>Information published.</p> 3.0 2026-10-13T02:39:50 <p>Information published.</p> 2.0 2026-10-10T14:51:23 <p>Information published.</p> Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic Mariner apache Yes CVE-2026-94655 Allocation of Resources Without Limits or Throttling 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:51:58 <p>Information published.</p> 2.0 2026-10-10T14:58:48 <p>Information published.</p> 3.0 2026-10-13T01:51:28 <p>Information published.</p> Apache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size bound Mariner apache Yes CVE-2026-94657 Allocation of Resources Without Limits or Throttling 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:45:36 <p>Information published.</p> 2.0 2026-10-10T14:53:58 <p>Information published.</p> 3.0 2026-10-13T01:46:00 <p>Information published.</p> Apache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic) Mariner apache Yes CVE-2026-94658 Inefficient Algorithmic Complexity 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:48:20 <p>Information published.</p> 2.0 2026-10-10T14:55:42 <p>Information published.</p> 3.0 2026-10-13T01:48:43 <p>Information published.</p> Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory) Mariner apache Yes CVE-2026-96288 Uncontrolled Recursion 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:50:56 <p>Information published.</p> 2.0 2026-10-10T14:57:54 <p>Information published.</p> 3.0 2026-10-13T01:50:41 <p>Information published.</p> Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard Mariner apache Yes CVE-2026-96289 Uncontrolled Recursion 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:43:01 <p>Information published.</p> 2.0 2026-10-10T14:52:16 <p>Information published.</p> 3.0 2026-10-13T01:44:25 <p>Information published.</p> Apache Thrift: Lua `THttpTransport:_parseHeaders` matches each header line with a backtracking pattern (quadratic) Mariner apache Yes CVE-2026-96292 Inefficient Regular Expression Complexity 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:51:28 <p>Information published.</p> 2.0 2026-10-10T14:58:22 <p>Information published.</p> 3.0 2026-10-13T01:51:04 <p>Information published.</p> Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection Mariner apache Yes CVE-2026-96294 Uncaught Exception 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 2.0 2026-10-10T15:05:24 <p>Information published.</p> 3.0 2026-10-13T02:02:40 <p>Information published.</p> 1.0 2026-10-03T01:05:58 <p>Information published.</p> Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound Mariner apache Yes CVE-2026-96990 Allocation of Resources Without Limits or Throttling 0-17084 0-17084 Important 0-17084 Release Notes 0-17084 Security Update 0.25.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-07T01:39:47 <p>Information published.</p> 3.0 2026-10-13T02:37:34 <p>Information published.</p> 2.0 2026-10-10T14:48:52 <p>Information published.</p>